CVE-2021-41308: Medium severity atlassian jira vulnerability
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the ReplicationSettings!default.jspa endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-41308.
What is the affected software for this vulnerability?
The affected software for this vulnerability includes Atlassian Jira Server, Atlassian Jira Data Center, and Atlassian Jira Software Data Center.
What is the severity rating of CVE-2021-41308?
The severity rating of CVE-2021-41308 is medium.
How can an authenticated yet non-administrator attacker exploit this vulnerability?
An authenticated yet non-administrator attacker can exploit this vulnerability by editing the File Replication settings via the `ReplicationSettings!default.jspa` endpoint.
Which versions of the affected software are vulnerable?
Versions of Atlassian Jira Server and Data Center before version 8.6.0, as well as versions between 8.7.0 and 8.13.12 (inclusive) for Atlassian Jira Data Center and versions between 8.14.0 and 8.20.1 (inclusive) for Atlassian Jira Server are vulnerable.