CVE-2021-43948
CVE-2021-43948
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.
Affected products
Atlassian · Jira Service Management Data CenterAtlassian · Jira Service Management ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →