Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Past incidentsFull incident
ClosedPatched

Day · Nov 6, 2023

Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)

Atlassian Confluence Data Center and Server

Follow this incident

Updates on Nov 6, 2023

  1. Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments

Summary

An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.

Read the full incident →

Advisories3

Sponsored

Buy sponsor slot · $149/mo