CVE-2021-26076
UNKNOWN
Published 2021-04-14T23:45:19.196220Z
Actions:
No CVSS data available
Description
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.0 allows remote anonymous attackers who can perform an attacker in the middle attack to learn which mode a user is editing in due to the cookie not being set with a secure attribute if Jira was configured to use https.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
Affected Versions:
Published: 2021-04-14T23:45:19.196220Z
Last Modified: 2024-10-17T14:12:32.765Z
Copied to clipboard!