CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.
CVE
CVE-2021-43949
Severity
MEDIUM
CVSS
4.3
EPSS
0.81%
Original NVD Description
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)