EXPOSURES › CVE-2021-26085

CVE-2021-26085

CRITICAL ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-03-28 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-26085 ↗

⌖ EXPLOITED IN THE WILD SHAME 80/100 ransomwareexploited-in-wild

Atlassian Confluence Server had a pre-auth file read vulnerability actively exploited by ransomware actors, allowing unauthorized access to restricted files.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Atlassian · vendor Confluence Server · product

DESCRIPTION

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.