The vulnerability of the Atlassian Confluence Server web server, related to authentication errors, allows a hacker to read arbitrary files.

🗓️ 20 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru

The Atlassian Confluence Server authentication error vulnerability allows remote reading of arbitrary files.

Reporter	Title	Published	Views	Family All 29
0day.today	Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read Vulnerability	5 Oct 202100:00	–	zdt
GithubExploit	Exploit for Forced Browsing in Atlassian Confluence_Data_Center	5 Oct 202108:20	–	githubexploit
ATTACKERKB	CVE-2021-26085	29 Jul 202100:00	–	attackerkb
Atlassian	Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448	10 Nov 202000:03	–	atlassian
Atlassian	Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085	21 Jul 202100:18	–	atlassian
Atlassian	Limited Remote File Read in Jira Software Server - CVE-2021-26086	12 Aug 202103:49	–	atlassian
Atlassian	Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448	10 Nov 202000:03	–	atlassian
Atlassian	Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085	21 Jul 202100:18	–	atlassian
Atlassian	Limited Remote File Read in Jira Software Server - CVE-2021-26086	12 Aug 202103:49	–	atlassian
Circl	CVE-2021-26085	3 Aug 202107:27	–	circl

Vulners

Node

atlassian confluence_serverRange7.5.0–7.12.3

OR

atlassian confluence_serverRange<7.4.10

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/164401/Atlassian-Confluence-Server-7.5.1-Arbitrary-File-Read.html
jira	www.jira.atlassian.com/browse/CONFSERVER-67893
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26085
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

CVSS 25

CVSS 35.3

EPSS0.93977

atlassian confluence server authentication errors arbitrary file read remote access