Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72293HistoryApr 07, 2021 - 6:10 a.m.
Anonymous users are able to view user information through the /rest/api/2/search endpoint - CVE-2021-39122
2021-04-0706:10:01
security-metrics-bot
jira.atlassian.com
14
atlassian jira server
atlassian jira data center
information disclosure
EPSS
0.002
Percentile
57.0%
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users’ emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint.
The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
Affected versions:
- version < 8.5.13
- 8.6.0 ≤ version < 8.13.5
- 8.14.0 ≤ version < 8.15.1
Fixed versions:
- 8.5.13
- 8.13.5
- 8.15.1
- 8.16.0
Related
atlassian
atlassian
cvelist
cvelist
CVE-2021-39122
2021-09-08 02:05:10
CVE-2020-36286
2021-04-01 03:10:12
cve
cve
CVE-2021-39122
2021-09-08 02:15:06
CVE-2020-36286
2021-04-01 03:15:13
nvd
nvd
CVE-2021-39122
2021-09-08 02:15:06
CVE-2020-36286
2021-04-01 03:15:13
prion
prion
Information disclosure
2021-09-08 02:15:00
Denial of service
2021-04-01 03:15:00
cnvd
cnvd
nessus
nessus
Atlassian Jira < 8.5.13 Multiple Vulnerabilities
2021-07-02 00:00:00
Atlassian Jira 8.6.x < 8.13.5 Multiple Vulnerabilities
2021-07-02 00:00:00
Atlassian Jira 8.14.x < 8.15.1 Multiple Vulnerabilities (2/2)
2021-07-02 00:00:00