Atlassian Jira Software Data Center 8.13.12

CPE Details

Atlassian Jira Software Data Center 8.13.12
atlassian
jira_software_data_center
8.13.12
2021-10-26
12h22 +00:00
2022-03-28
11h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:atlassian:jira_software_data_center:8.13.12:*:*:*:*:*:*:*

Informations

Vendor

atlassian

Product

jira_software_data_center

Version

8.13.12

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-41311 2021-12-08 03h35 +00:00 Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. The affected versions are before version 8.19.1.
7.5
High
CVE-2021-41309 2021-12-08 03h35 +00:00 Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/resource endpoint. The affected versions of Jira Server and Data Center are before version 8.19.1.
5.3
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.