Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Past incidentsFull incident
ClosedPatched

Day · Oct 31, 2023

Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)

Atlassian Confluence Data Center and Server

Follow this incident

Updates on Oct 31, 2023

  1. Atlassian discloses CVE-2023-22518 and ships fixes

    Source

Summary

An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.

Read the full incident →

Advisories3

Sponsored

Buy sponsor slot · $149/mo