Lucene search
K

12 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/03/30 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later...

9.8CVSS7.4AI score0.92567EPSS
Exploits2References1
GithubExploit
GithubExploit
added 2022/05/25 10:47 a.m.4 views

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE(CVE-2022-0540)...

9.8CVSS7.6AI score0.92567EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.2 views

The vulnerability of the Jira Seraph authentication platform, along with the Jira and Jira Service Management systems for tracking errors and incidents, allows attackers to increase their privileges.

The vulnerability of the Jira Seraph web authentication platform is related to deficiencies in the authentication process of Jira and Jira Service Management. Exploiting this vulnerability could allow attackers, operating remotely, to increase their privileges through specially crafted HTTP...

10CVSS8AI score0.92567EPSS
Exploits2References5Affected Software2
The Hacker News
The Hacker News
added 2022/04/23 5:52 a.m.375 views

Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability

Atlassian has published a security advisory warning of a critical vulnerability in its Jira software that could be abused by a remote, unauthenticated attacker to circumvent authentication protections. Tracked as CVE-2022-0540, the flaw is rated 9.9 out of 10 on the CVSS scoring system and reside...

9.8CVSS1.5AI score0.9444EPSS
Exploits47
NCSC
NCSC
added 2022/04/21 12:0 a.m.4 views

Vulnerability fixed in Jira Seraph

A vulnerability has been fixed in Jira Seraph, the web framework used for authentication within Jira. The vulnerability allows a remote malicious party to circumvent authentication bypass authentication by sending a specially prepared HTTP request to the server. The application is only vulnerable...

9.8CVSS6.9AI score0.92567EPSS
Exploits2
OSV
OSV
added 2022/04/20 7:15 p.m.4 views

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

9.8CVSS7.3AI score0.92567EPSS
Exploits2References3
NVD
NVD
added 2022/04/20 7:15 p.m.19 views

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

9.8CVSS0.92567EPSS
Exploits2References3
Prion
Prion
added 2022/04/20 7:15 p.m.25 views

Authentication flaw

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

6.8CVSS9.5AI score0.92567EPSS
Exploits2References3Affected Software3
Vulnrichment
Vulnrichment
added 2022/04/20 6:30 p.m.21 views

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

9.6AI score0.92567EPSS
Exploits2References3
Cvelist
Cvelist
added 2022/04/20 6:30 p.m.26 views

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

9.8AI score0.92567EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2022/04/20 12:0 a.m.8 views

PT-2022-2325

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.13.18 Atlassian Jira Server and Data Center versions 8.14.0 through 8.20.6 Atlassian Jira Server and Data Center versions 8.21.0 through 8.22.0 Atlassian Jira Service Management Server...

9.8CVSS7.5AI score0.92567EPSS
Exploits2References24
ATTACKERKB
ATTACKERKB
added 2022/04/20 12:0 a.m.6 views

CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before...

9.8CVSS8AI score0.92567EPSS
Exploits2References5Affected Software5
Rows per page
Query Builder