Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515) ยท updates https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 A broken access control bug in publicly reachable Confluence Data Center and Server let outside attackers create Confluence administrator accounts. It was exploited as a zero-day, and Microsoft attributed it to the China-nexus Storm-0062. Atlassian Cloud was not affected. en Mon, 16 Oct 2023 00:00:00 GMT Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): CISA, FBI and MS-ISAC joint advisory AA23-289A on active exploitation https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515#2023-10-16-01e4dfcf Mon, 16 Oct 2023 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-289a">Source</a></p> Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): CISA adds CVE-2023-22515 to the KEV catalog https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515#2023-10-05-df08e9e5 Thu, 05 Oct 2023 00:00:00 GMT critical <p>Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): CISA adds CVE-2023-22515 to the KEV catalog</p> Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): Atlassian discloses the zero-day after customer reports and ships fixes https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515#2023-10-04-28b585ea Wed, 04 Oct 2023 00:00:00 GMT critical <p><a href="https://confluence.atlassian.com/security/cve-2023-22515-broken-access-control-vulnerability-in-confluence-data-center-and-server-1295682276.html">Source</a></p>