https://pwn.watch/t/cerber Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 07 Nov 2023 00:00:00 GMT https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 Tue, 07 Nov 2023 00:00:00 GMT critical <p>An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> 7.19.16, 8.3.4, 8.4.4, 8.5.3, 8.6.1</p> <p><strong>Latest updates:</strong></p><ul><li>2023-11-07: CISA adds CVE-2023-22518 to the KEV catalog</li><li>2023-11-06: Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments</li><li>2023-10-31: Atlassian discloses CVE-2023-22518 and ships fixes (<a href="https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2023-22518</p>