CVE-2022-0540
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 88.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 88.06% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- atlassian/jira data center · atlassian/jira server · atlassian/jira service management
- Source
- security@atlassian.com
References
- https://confluence.atlassian.com/display/JIRA/Jira+Security+Advisory+2022-04-20Issue Tracking, Patch, Vendor Advisory
- https://jira.atlassian.com/browse/JRASERVER-73650Issue Tracking, Patch, Vendor Advisory
- https://jira.atlassian.com/browse/JSDSERVER-11224Issue Tracking, Patch, Vendor Advisory
- https://confluence.atlassian.com/display/JIRA/Jira+Security+Advisory+2022-04-20Issue Tracking, Patch, Vendor Advisory
- https://jira.atlassian.com/browse/JRASERVER-73650Issue Tracking, Patch, Vendor Advisory
- https://jira.atlassian.com/browse/JSDSERVER-11224Issue Tracking, Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.