Malwarecritical

Alert: 'Effluence' Backdoor Persists Despite Patching Atlassian Confluence Servers

The Hacker Newsby @TheHackersNewsNov 10, 2023 · 08:58 UTC (Nov 10, 2023)2 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-22515 CVE-2023-22518

Tags: cve-2023-22515 cve-2023-22518 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22515	Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server	9.8	99%	KEVRansomwarePoC	Oct 4, 2023 KEV Oct 5, 2023
CVE-2023-22518	Improper Authorization in Atlassian Confluence Data Center and Server	9.8	100%	KEVRansomwarePoC	Oct 31, 2023 KEV Nov 7, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 10, 2023 Cyber Attack / Threat Intelligence Cybersecurity researchers have discovered a stealthy backdoor named Effluence that's deployed following the successful exploitation of a recently disclosed security flaw in Atlassian Confluence Data Center and Server.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.