Broken Access Control Vulnerability in Atlassian Jira Server and Data Center

CVE-2021-43946

What is CVE-2021-43946?

Authenticated remote attackers can exploit a vulnerability in Atlassian Jira Server and Data Center, specifically through the /secure/EditSubscription.jspa endpoint, allowing them to add administrator groups to filter subscriptions. This security flaw could lead to unauthorized access and privilege escalation, affecting critical configurations and data integrity across the platform.

References