Atlassian Bitbucket: Critical severity authentication vulnerability (CVE-2023-22501)

Atlassian Bitbucket: Critical severity authentication vulnerability (CVE-2023-22501)

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:P)

Published

02/01/2023

Created

02/07/2023

Added

02/06/2023

Modified

03/03/2023

Description

A critical severity authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances

Solution(s)

• atlassian-jira-service-management-cve-2023-22501

References

• https://attackerkb.com/topics/cve-2023-22501
• CVE - 2023-22501
• https://jira.atlassian.com/browse/JSDSERVER-12312
• https://confluence.atlassian.com/kb/faq-for-cve-2023-22501-1189797488.html
• https://confluence.atlassian.com/jira/jira-service-management-server-and-data-center-advisory-cve-2023-22501-1188786458.html