Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.

Remediation

References

CVE-2021-39113

Related Vulnerabilities

WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)

Grafana Improper Authentication Vulnerability (CVE-2021-28148)

Oracle JRE CVE-2013-0435 Vulnerability (CVE-2013-0435)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.26)

OpenSSL Numeric Errors Vulnerability (CVE-2016-2105)

Severity

High

Classification

CVE-2021-39113 CWE-613

Tags

Missing Update Known Vulnerabilities