ClosedPatched
Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)
Atlassian Confluence Data Center and Server
An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.
Why this severity: CVSS 10.0 (Atlassian, raised from 9.1), actively exploited (CISA KEV), known ransomware use
- Started
- Oct 31, 2023
- Closed
- Nov 7, 2023
Affected
- All versions of Confluence Data Center and Server before the fixed releases (NVD)
Fixed in
- 7.19.16
- 8.3.4
- 8.4.4
- 8.5.3
- 8.6.1
Updates by day3
Advisories3
Get an email when a new major security incident drops. No spam, unsubscribe any time.
