ClosedCriticalPatched
Day · Oct 16, 2023
Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515)
Atlassian Confluence Data Center and Server
Updates on Oct 16, 2023
CISA, FBI and MS-ISAC joint advisory AA23-289A on active exploitation
Source
Summary
A broken access control bug in publicly reachable Confluence Data Center and Server let outside attackers create Confluence administrator accounts. It was exploited as a zero-day, and Microsoft attributed it to the China-nexus Storm-0062. Atlassian Cloud was not affected.
Read the full incident →Advisories4
- CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and ServerAtlassian · Oct 4, 2023
- Threat Actors Exploit Atlassian Confluence CVE-2023-22515 for Initial Access to Networks (AA23-289A)CISA · Oct 16, 2023
- NVD: CVE-2023-22515NVD
- CISA Known Exploited Vulnerabilities CatalogCISA · Oct 5, 2023
