CVE-2022-26138—Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

PUBLISHEDvulnerability record
2022-07-29 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2022-26138
项目：
Atlassian
产品：
Confluence
添加日期：
2022-07-29
到期日：
2022-08-19
最后更新：
June 21, 2025

漏洞名称

Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

描述

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.

已知用于勒索软件活动吗？

勒索软件状态：
Unknown

采集行动

Apply updates per vendor instructions.

其他说明

  • https://confluence.atlassian.com/doc/questions-for-confluence-security-advisory-2022-07-20-1142446709.html
  • https://nvd.nist.gov/vuln/detail/CVE-2022-26138

相关 CWE

browse all CVEs