Atlassian Confluence: Questions for Confluence App Hardcoded Credentials Vulnerability (CVE-2022-26138)

🗓️ 17 Aug 2022 10:53:12Reported by Mayank DeshmukhType

Atlassian Confluence's Questions for Confluence App has a hardcoded credentials vulnerability (CVE-2022-26138) where an attacker with knowledge of the credentials can access sensitive contents

Reporter	Title	Published	Views	Family All 180
Rapid7 Blog	Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138	27 Jul 202219:26	–	rapid7blog
Rapid7 Blog	Metasploit Weekly Wrap-Up	10 Jun 202218:07	–	rapid7blog
Rapid7 Blog	Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite	17 Aug 202212:55	–	rapid7blog
Rapid7 Blog	CVE-2022-36804: Easily Exploitable Vulnerability in Atlassian Bitbucket Server and Data Center	20 Sep 202215:14	–	rapid7blog
Rapid7 Blog	Active Exploitation of Confluence CVE-2022-26134	2 Jun 202223:27	–	rapid7blog
Rapid7 Blog	What’s New in InsightVM and Nexpose: Q3 2022 in Review	28 Sep 202214:11	–	rapid7blog
Rapid7 Blog	Critical CVEs in Outdated Versions of Atlassian Confluence and VMware vCenter Server	19 Jan 202415:40	–	rapid7blog
Rapid7 Blog	Year in Review: Rapid7 Vulnerability Management	9 Jan 202317:00	–	rapid7blog
The Hacker News	Latest Critical Atlassian Confluence Vulnerability Under Active Exploitation	29 Jul 202203:19	–	thn
The Hacker News	CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks	30 Jul 202203:54	–	thn

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo