Nov 7, 2023
0 new incidents, 1 with updates.
Updated
- ClosedCriticalPatched
Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)
An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.
Atlassian Confluence Data Center and ServerClosed Nov 7, 2023