CVE-2021-26069: Medium severity atlassian data center vulnerability
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations API endpoint. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-26069?
CVE-2021-26069 is a vulnerability in Atlassian Jira Server and Data Center that allows unauthenticated remote attackers to download temporary files and enumerate project keys.
What are the affected versions of Atlassian Jira Server and Data Center?
The affected versions are before version 8.5.11 for Atlassian Jira Server and before version 8.6.0 to 8.13.3 for Atlassian Jira Data Center.
What is the severity of CVE-2021-26069?
CVE-2021-26069 has a severity rating of medium (5.3).
How does CVE-2021-26069 work?
CVE-2021-26069 allows unauthenticated remote attackers to exploit an Information Disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations API endpoint to download temporary files and enumerate project keys.
Is there a fix for CVE-2021-26069?
Yes, upgrading to a version that is not affected by the vulnerability is the recommended fix for CVE-2021-26069.