Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: atlassian

Published: 2022-01-10T15:26:24.469303Z

Updated: 2024-10-04T18:11:30.539Z

Reserved: 2021-11-16T00:00:00

Link: CVE-2021-43949

cve-icon Vulnrichment

Updated: 2024-08-04T04:10:16.282Z

cve-icon NVD

Status : Analyzed

Published: 2022-01-10T16:15:09.587

Modified: 2022-03-04T15:30:36.943

Link: CVE-2021-43949

cve-icon Redhat

No data.