CVE-2023-22518
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
7 de nov. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Atlassian / Confluence Data Center and Server
Vulnerabilidade
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
Adicionado ao KEV
7 de nov. de 2023
Corrigir até
28 de nov. de 2023
Uso conhecido em ransomware
Sim
Descrição resumida
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html; https://nvd.nist.gov/vuln/detail/CVE-2023-22518