Vulnerabilities > CVE-2021-39113 - Insufficient Session Expiration vulnerability in Atlassian products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
atlassian
CWE-613
NVD
Published: 2021-08-30
Updated: 2024-10-11

Summary

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.

Vulnerable Configurations

Part Description Count
Application
Atlassian
618

Common Weakness Enumeration (CWE)

References