CVE-2021-43958

atlassian crucible, atlassian fisheye

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-43958

Katalog CVE

CVSS 9.8 · Critical EPSS 1,5%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada atlassian crucible, atlassian fisheye. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were beyond their max failed login limits and therefore required solving a CAPTCHA in addition to providing user credentials for authentication via a improper restriction of excess authentication attempts vulnerability.

Rincian

Terbit di NVD
16 Maret 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-307: Improper Restriction of Excessive Authentication Attempts
EPSS (30 hari)
1,5% peluang dieksploitasi; lebih tinggi dari 72,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
atlassian crucible Semua versi sebelum 4.8.9
atlassian fisheye Semua versi sebelum 4.8.9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.