Vulnerabilitycritical

Atlassian addresses a critical Jira authentication bypass flaw

Security Affairsby @securityaffairsApr 24, 2022 · 13:57 UTC (Apr 24, 2022)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze CVE-2022-0540 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-0540 CVE-2021-26084

Tags: cve-2022-0540 cve-2021-26084 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2022-0540	A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request	9.8	88%		Apr 20, 2022

From the original article

2 min read at securityaffairs.com

Atlassian fixed a critical flaw in its Jira software, tracked as CVE-2022-0540 , that could be exploited to bypass authentication. Atlassian has addressed a critical vulnerability in its Jira Seraph software, tracked as CVE-2022-0540 (CVSS score 9. 9), that can be exploited by an unauthenticated attacker to bypass authentication.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.