Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Jira Server vulnerabilities

mctwf November 9, 2021

We've become aware of vulnerabilities with Jira Server and Software Data Center.  We don't think these impact us, but want to verify.  The vulnerabilities are: 

https://nvd.nist.gov/vuln/detail/CVE-2021-41310

https://nvd.nist.gov/vuln/detail/CVE-2021-41312

https://nvd.nist.gov/vuln/detail/CVE-2021-41313

 

We are running Jira Core 8.1.3, Jira Software 8.1.3 and Service Desk 4.1.3.  These aren't "Server" or "Data Center", but I'm unfamiliar with naming conventions and product names.  I thought "Core" was the same as "server", but now I don't think so

 

1 answer

2 votes
Brant Schroeder
Community Champion
November 9, 2021

@mctwf The very first item in your list does impact your deployment as you are running Core 8.1.3 which is a server instance.  Everything less than 8.5.19 is impacted.  https://jira.atlassian.com/browse/JRASERVER-72800

The second one impacts your instance as well since it affects all versions less than 8.19.1. https://jira.atlassian.com/browse/JRASERVER-72801

The third one on your list also impacts your instance since it impacts all versions less than 8.21.0 https://jira.atlassian.com/browse/JRASERVER-72898

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
TAGS
atlassian, team '25 europe, atlassian event, barcelona 2025, jira, confluence, atlassian intelligence, rovo, ai-powered collaboration, developer tools, agile teams, digital transformation, teamwork solutions, atlassian conference, product announcements

🌆 Team '25 Europe registration is now open!

Join the largest European gathering of the Atlassian Community and reimagine what’s possible when great teams and transformative technology come together. Plus, grab your Super Fan ticket now and save over €1,000 on your pass before prices rise on 3 June.

Register now
AUG Leaders

Atlassian Community Events