CVE-2021-43948: 
Jira Service Management vulnerability analysis and mitigation

CVE-2021-43948 affects Atlassian Jira Service Management Server and Data Center versions before 4.21.0. The vulnerability allows authenticated remote attackers to view the names of private objects through an Improper Authorization vulnerability in the "Move objects" feature (Vendor Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires network access, low attack complexity, low privileges, and no user interaction, resulting in low confidentiality impact with no impact on integrity or availability (NVD).

The vulnerability allows authenticated attackers to view the names of private objects that they should not have access to, resulting in an information disclosure issue. This could potentially expose sensitive information contained in object names to unauthorized users (Vendor Advisory).

The vulnerability has been fixed in Jira Service Management version 4.21.0. Organizations using affected versions should upgrade to version 4.21.0 or later to address this security issue (Vendor Advisory).