Broken Access Control Vulnerability in Atlassian Jira Service Management Server and Data Center Allows Unauthorized Access to Import Source Configuration Information

Broken Access Control Vulnerability in Atlassian Jira Service Management Server and Data Center Allows Unauthorized Access to Import Source Configuration Information

CVE-2021-43950 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.

Learn more about our Cis Benchmark Audit For Server Software.