Miembros de
Boletines de Vulnerabilidades |
CVE-2021-41311 |
|
| Software afectado | ATLASSIAN |
| Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. The affected versions are before version 8.19.1. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2021-41311 | |
