Access-revoked user can enable/disable Issue Collectors on a Jira project - CVE-2021-41312

Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Authentication vulnerability in the /secure/ViewCollectors endpoint.

The affected versions are before version 8.19.1.

Affected versions:

• version < 8.19.1

Fixed versions:

• > 8.19.1
• Backported to LTS 8.13.19