Who defines the severity and priority of a bug?

Ideally, defining severity of the bug is the job of a tester and defining the
priority of the bug is job of product owner or business analyst. However, this  practice may differ from organization to organization. In few organizations, it’s  the QA who defines both these parameters which ideally shouldn’t be the case  until the QA is well equipped with the business priorities.