8 matches found
Atlassian Jira < 8.20.1 Improper Authorization
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.20.1. It is, therefore, affected by a vulnerability allowing authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization...
Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05447)
Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable due to an access control error in the product's /secure/admin/ConfigureBatching!default.jspa file, which fails to properly handle user permissions. An attacker could use an unauthorized us...
CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
Authorization
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
CVE-2021-41313: Improper Authorization
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
Privilege escalation leads unauthorized user to edit email batch configurations - CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....