CVE-2021-43948

Published: Feb 15, 2022Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.

Affected (2)

Products: Atlassian: Jira Service Management

Atlassian

1 product

Jira Service Management

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Atlassian Jira Service Management	Before 4.21.0
Atlassian Jira Service Management	Before 4.21.0

References (2)

https://jira.atlassian.com/browse/JSDSERVER-10981

Source: security@atlassian.com

Vendor Advisory

https://jira.atlassian.com/browse/JSDSERVER-10981

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.