Jira Service Management Server and Data Center had serious security flaws that have been fixed by Atlassian. An attacker might use these flaws to impersonate another user and access vulnerable instances without authorization.