Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-72499
HistoryJun 09, 2021 - 1:05 a.m.

Username enumeration on Jira Software Server 8.15 - CVE-2021-26081

2021-06-0901:05:42
security-metrics-bot
jira.atlassian.com
26

0.002 Low

EPSS

Percentile

55.9%

Affected versions of Atlassian Jira Server and Jira Data CenterΒ allow remote attackers to discover the username of users via an enumeration vulnerability in the REST API.

CVE-2021-26081

The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, from version 8.14.0 before 8.16.1, from version 8.17.0 before 8.16.2, and from version 8.17.0 before 8.17.0.

Affected versions:

  • version < 8.5.14
  • 8.6.0 ≀ version < 8.13.6
  • 8.14.0 ≀ version < 8.16.1

Fixed versions:

  • 8.5.14
  • 8.13.6
  • 8.16.1
  • 8.16.2
  • 8.17.0

0.002 Low

EPSS

Percentile

55.9%

Related for ATLASSIAN:JRASERVER-72499