The vulnerability of the Atlassian Confluence Server web server and the date of the Confluence Data Center is related to deficiencies in the authentication process, which allow attackers to increase their privileges.

🗓️ 02 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Atlassian Confluence Server and Data Center have authentication flaws that permit remote privilege escalation.

Reporter	Title	Published	Views	Family All 56
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	9 Nov 202306:56	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	20 Nov 202318:58	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	23 Jan 202413:38	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	5 Nov 202306:45	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	2 Nov 202322:52	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	28 Nov 202303:33	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	31 Oct 202305:35	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	31 Oct 202305:35	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	5 May 202502:12	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	5 Nov 202306:45	–	githubexploit

Vulners

Node

atlassian jira_data_centerRange7.19.0–7.19.16

OR

atlassian jira_data_centerRange8.3.0–8.3.4

OR

atlassian jira_data_centerRange8.4.0–8.4.4

OR

atlassian jira_data_centerRange8.5.0–8.5.3

OR

atlassian jira_data_centerRange8.6.0–8.6.1

OR

atlassian confluence_serverRange8.6.0–8.6.1

OR

atlassian confluence_serverRange8.5.0–8.5.3

OR

atlassian confluence_serverRange8.4.0–8.4.4

OR

atlassian confluence_serverRange8.3.0–8.3.4

OR

atlassian confluence_serverRange7.19.0–7.19.16

Source	Link
confluence	www.confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html
jira	www.jira.atlassian.com/browse/CONFSERVER-93142
packetstormsecurity	www.packetstormsecurity.com/files/176264/Atlassian-Confluence-Improper-Authorization-Code-Execution.html
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

8High risk

Vulners AI Score8

CVSS 39.1

CVSS 29.4

EPSS0.99999

Atlassian Confluence Server Confluence Data Center authentication flaws remote privilege escalation