Lucene search
AtlassianCVELIST:CVE-2021-43940HistoryFeb 15, 2022 - 3:15 a.m.
CVE-2021-43940
2022-02-1503:15:09
CWE-427
atlassian
www.cve.org
6
cve-2021-43940
atlassian confluence
dll hijacking
windows
elevated privileges
Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center on Windows. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
CNA Affected
[
{
"product": "Confluence Server",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "7.4.10",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.5.0",
"versionType": "custom"
},
{
"lessThan": "7.12.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Confluence Data Center",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "7.4.10",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.5.0",
"versionType": "custom"
},
{
"lessThan": "7.12.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
Atlassian Confluence Server权限提升漏洞
2022-02-17 00:00:00
cve
cve
CVE-2021-43940
2022-02-15 04:15:07
prion
prion
Design/Logic Flaw
2022-02-15 04:15:00
atlassian
atlassian
Local Privilege Escalation via DLL hijack - CVE-2021-43940
2021-07-08 11:44:51
nvd
nvd
CVE-2021-43940
2022-02-15 04:15:07