CVE-2021-43951

Summary

CVE	CVE-2021-43951
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-01-10 16:15:00 UTC
Updated	2022-03-04 15:32:00 UTC
Description	Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0.

Risk And Classification

Problem Types: CWE-200

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Atlassian	Data Center	All	All	All	All
Application	Atlassian	Jira Service Management	All	All	All	All
Application	Atlassian	Jira Service Management	All	All	All	All
Application	Atlassian	Jira Service Management	All	All	All	All

References

Reference	Source	Link	Tags
[JSDSERVER-10984] Object import configuration details are leaked via the Create Object type mapping feature - CVE-2021-43951 - Create and track feature requests for Atlassian products.	MISC	jira.atlassian.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

730463 Atlassian Jira Service Management Server and Data Center Information Disclosure Vulnerability (JSDSERVER-10984)