NetSight
IP …
critical9.8

CVE-2021-37843

The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authenti…

Impact

The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known (i.e., no other authentication is provided). The fixed versions are for Jira: 3.6.6.1, 4.0.12, 5.0.5; for Confluence 3.6.6, 4.0.12, 5.0.5; for Bitbucket 2.5.9, 3.6.6, 4.0.12, 5.0.5; for Bamboo 2.5.9, 3.6.6, 4.0.12, 5.0.5; and for Fisheye 2.5.9.

Affected products

VendorProductAffected versions
AtlassianSaml Single Sign On
before 2.5.9
before 3.5.6
before 3.6.6.1
from 3.0.0 before 3.6.6
from 3.6.0 before 3.6.6.1
from 4.0.0 before 4.0.12

Weakness classification

CWE-306

References