Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Atlassian · Confluence Data Center and Server
Date added (CISA)
2023-10-05
Remediation due
2023-10-13
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.