CVE-2021-43948

🗓️ 15 Feb 2022 03:35:10Reported by atlassianType

Atlassian Jira Service Management Server and Data Center allows authenticated remote attackers to view private object names

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-43948	15 Feb 202207:33	–	circl
CNNVD	Atlassian Jira Service Management Server 和 Data Center 安全漏洞	15 Feb 202200:00	–	cnnvd
CNVD	Atlassian Jira Service Management Server Licensing Issue Vulnerability	17 Feb 202200:00	–	cnvd
Cvelist	CVE-2021-43948	15 Feb 202203:35	–	cvelist
EUVD	EUVD-2021-30810	3 Oct 202520:07	–	euvd
Atlassian	Names of private objects are leaked to unauthorized users via the "Move objects" feature - CVE-2021-43948	22 Dec 202103:12	–	atlassian
NVD	CVE-2021-43948	15 Feb 202204:15	–	nvd
Prion	Authorization	15 Feb 202204:15	–	prion
Vulnrichment	CVE-2021-43948	15 Feb 202203:35	–	vulnrichment
Tenable Nessus	Atlassian Jira Service Management < 4.21.0 Multiple Vulnerabilities	3 May 202300:00	–	nessus

NVD

Node

atlassian jira_service_managementRange<4.21.0data_center

atlassian jira_service_managementRange<4.21.0server

[
  {
    "product": "Jira Service Management Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "4.21.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Service Management Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "4.21.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/JSDSERVER-10981

21 Nov 2024 06:30Current

4.5Medium risk

Vulners AI Score4.5

CVSS 24

CVSS 3.14.3

EPSS0.00218

SSVC