CVE-2021-43950

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@atlassian.com

Published

2022-02-15

Last modified

2024-10-08

Weaknesses

CWE-285

Affected products

• Jira Service Management (Atlassian)
• Jira Service Management Data Center (Atlassian)
• Jira Service Management Server (Atlassian)

References

• https://jira.atlassian.com/browse/JSDSERVER-10983