CVE-2021-39121
Published: 08 September 2021
Summary
CVE-2021-39121 is a medium-severity an unspecified weakness vulnerability in Atlassian Jira Data Center. Its CVSS base score is 4.3 (Medium).
Operationally, ranked at the 46.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-25557
Vulnerability details
Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from version 8.6.0…
more
before 8.13.10, and from version 8.14.0 before 8.18.2.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.