medium4.3
CVE-2021-43949
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access …
Impact
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Service Management | before 4.21.0 |