cognitive cybersecurity intelligence

News and Analysis

Search

Critical Atlassian Confluence zero-day flaw under attack

Atlassian has patched a zero-day vulnerability that affects Confluence Data Center and Server, two self-managed workspace suite versions. The flaw, identified as CVE-2023-22515, is a critical privilege escalation vulnerability that was under attack. Atlassian encourages customers with affected versions to upgrade to fixed releases. The vulnerability may allow external attackers to exploit publicly accessible Confluence instances to create unauthorized Confluence administrator accounts and access instances. Previous similar issues have drawn threat actors in the past.

Source: www.techtarget.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts