CVE-2023-22515

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2023-10-05

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-22515

⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

Players implicated

Atlassian · vendor Confluence Data Center and Server · product

Description

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.