atlassian jira-core CVE-2022-0540 vulnerability in Atlassian Products
Published on April 20, 2022

product logo product logo
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.

NVD

Vulnerability Analysis

CVE-2022-0540 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is an authentification Vulnerability?

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

CVE-2022-0540 has been classified to as an authentification vulnerability or weakness.


Products Associated with CVE-2022-0540

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-0540 are published in these products:

Atlassian Jira Core
 
Atlassian Jira
 

Affected Versions

Atlassian Jira Core Server: Atlassian Jira Software Server: Atlassian Jira Software Data Center: Atlassian Jira Service Management Server: Atlassian Jira Service Management Data Center: atlassian jira_data_center: atlassian jira_server: atlassian jira_service_management: atlassian jira_service_management:

Exploit Probability

EPSS
92.49%
Percentile
99.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.