high7.5
CVE-2021-41312
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and …
Impact
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Authentication vulnerability in the /secure/ViewCollectors endpoint. The affected versions are before version 8.19.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Data Center | before 8.19.1 |
| Atlassian | Jira | before 8.19.1 |