CVE-2021-37843: Missing Authentication for Critical Function

The resolution SAML SSO apps for Atlassian products allow a remote attacker to login to a user account when only the username is known i.e., no other authentication is provided. The fixed versions are for Jira: 3.6.6.1, 4.0.12, 5.0.5; for Confluence 3.6.6, 4.0.12, 5.0.5; for Bitbucket 2.5.9, 3.6....

PT-2021-21885

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 3.6.6.1, 4.0.12, 5.0.5 Confluence versions prior to 3.6.6, 4.0.12, 5.0.5 Bitbucket versions prior to 2.5.9, 3.6.6, 4.0.12, 5.0.5 Bamboo versions prior to 2.5.9, 3.6.6, 4.0.12, 5.0.5 Fisheye versions prior to 2.5.9...