VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 15, 2022· Updated Jun 17, 2026

CVE-2021-43948

CVE-2021-43948

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Atlassian/Jira Service Management2 versions
    cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*range: <4.21.0
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*range: <4.21.0
  • Atlassian/Jira Service Management Data Center and Serverllm-fuzzy3 versions
    <4.21.0+ 2 more
    • (no CPE)range: <4.21.0
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.