CVE-2023-22515—Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

漏洞名称

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

描述

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.

其他说明

• https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-22515

相关新闻文章

• RansomHub Ransomware Group Targets 210 Victims Across Critical SectorsSeptember 2, 2024