Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affecting the Questions For Confluence app for Confluence Server and Confluence Data Center.
The flaw, tracked as CVE-2022-26138, arises when the app in question is enabled on either of two services, causing it to create a Confluence user account with the username "Leer másThe Hacker News - Most Trusted Cyber Security and Computer Security Analysis

Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affecting the Questions For Confluence app for Confluence Server and Confluence Data Center. The flaw, tracked as CVE-2022-26138, arises when the app in question is enabled on either of two services, causing it to create a Confluence user account with the username "

Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affecting the Questions For Confluence app for Confluence Server and Confluence Data Center.
The flaw, tracked as CVE-2022-26138, arises when the app in question is enabled on either of two services, causing it to create a Confluence user account with the username “Leer másThe Hacker News – Most Trusted Cyber Security and Computer Security Analysis

Facebook
Twitter
LinkedIn
Pinterest

Leave a Reply

Your email address will not be published. Required fields are marked *

ciso2ciso editor´s picks

Think Big Blog
Top 10 TED Talks to Learn about Cyber Security
Top 10 TED Talks to Learn about Cyber Security
National Cyber Security
Cyber Security Toolkit for Boards – Helping board members to get to grips with cyber security by NCSC
Cyber Security Toolkit for Boards – Helping board members to get to grips with cyber security by NCSC
Nathalie Cole
How Much 10 Companies Paid Their Virtual CISO Service in 2022 Benchmark by Nathaniel Cole
How Much 10 Companies Paid Their Virtual CISO Service in 2022 Benchmark by Nathaniel Cole
Fastercapital.com
How To Launch A Successful B2B Managed Security Services Provider MSSP Thinking like a CISO
How To Launch A Successful B2B Managed Security Services Provider MSSP Thinking like a CISO
NCSC
NCSC Cyber Security for Small Business “SMEs” Guide.
NCSC Cyber Security for Small Business “SMEs” Guide.
WILEY
Cybercrime Investigators Handbook by WILEY
Cybercrime Investigators Handbook by WILEY
LOGPOINT
396 Use Cases & Siem Rules Code ready for use for Mitre Attacks Events Detection in Your SOC by Logpoint
396 Use Cases & Siem Rules Code ready for use for Mitre Attacks Events Detection in Your SOC by Logpoint
Joas Antonio
ChatGPT for Cybersecurity by Joas Antonio dos Santos – malwareanalysis #reverseengineering
ChatGPT for Cybersecurity by Joas Antonio dos Santos – malwareanalysis #reverseengineering
ACSC Australia
Cyber Incident Response Plan Template by ACSC & Australian Goverment
Cyber Incident Response Plan Template by ACSC & Australian Goverment

More Latest Published Posts

Gray Hat Hacking: The Ethical Hacker’s Handbook, Second Edition
Gray Hat Hacking: The Ethical Hacker’s Handbook, Second Edition
EDR Bypassing via Memory Manipulation Techniques
EDR Bypassing via Memory Manipulation Techniques
NIST
Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines
Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines
Akamai
Cybersecurity in Financial Services
Cybersecurity in Financial Services
FORTINET
The Secure Network Journey
The Secure Network Journey
Akamai
Accelerate Compliance with the NSA Methodology for Adversary Obstruction
Accelerate Compliance with the NSA Methodology for Adversary Obstruction
CoESS
Cyber-Physical Securityand Critical Infrastructure
Cyber-Physical Securityand Critical Infrastructure
Centre for Cyber Security Belgium
CYBER FUNDAMENTALS ESSENTIAL
CYBER FUNDAMENTALS ESSENTIAL
CYBER SECURITY AWARENESS E-BOOK
CYBER SECURITY AWARENESS E-BOOK
New York State
NEW YORK STATE CYBERSECURITY STRATEGY
NEW YORK STATE CYBERSECURITY STRATEGY
ICIT
MATERIALITY MATTERS
MATERIALITY MATTERS
Cyphere
Cyber Incident Readiness Checklist
Cyber Incident Readiness Checklist
CROWDSTRIKE
2023Cloud Risk Report
2023Cloud Risk Report
CISSP
CISSP Concepts Guide
CISSP Concepts Guide
NIST
Building a Cybersecurity and Privacy Learning Program
Building a Cybersecurity and Privacy Learning Program
NSA
Best Practices for Securing Your Home Network
Best Practices for Securing Your Home Network
Microsoft Azure
Azure DevOps SecurityCheckList
Azure DevOps SecurityCheckList
Akamai
Software Defined Segmentation forData Center Operators
Software Defined Segmentation forData Center Operators
ISACA
Guide for the Implementation of Cyber Security Checks
Guide for the Implementation of Cyber Security Checks
Microsoft Security
Azure Defenses for Ransomware Attack by Microsoft Security
Azure Defenses for Ransomware Attack by Microsoft Security
Microsoft Security
Three Steps for Protecting Your Data End-to-End with Microsoft Purview by Microsoft Security
Three Steps for Protecting Your Data End-to-End with Microsoft Purview by Microsoft Security
Microsoft Security
The Cost of Inaction – A CISOs guide for getting boards of directors to invest in cybersecurity by Microsoft Security
The Cost of Inaction – A CISOs guide for getting boards of directors to invest in cybersecurity by Microsoft Security
SANS
SANS – Cloud Security Foundations, Frameworks, and Beyond – In partnership with aws , Google Cloud and Microsoft
SANS – Cloud Security Foundations, Frameworks, and Beyond – In partnership with aws , Google Cloud and Microsoft
National Security Agency
Defending Continuous Integ Cont Delivery CI DC Environ
Defending Continuous Integ Cont Delivery CI DC Environ
INTELTECHNIQUES
OSINT cheat Sheet
OSINT cheat Sheet
ministry of security
Data Center Security Checklist
Data Center Security Checklist
Google Cloud
Data governance_ Principles for securing and managing logs
Data governance_ Principles for securing and managing logs
LOG RHYTHM
Threat Hunting 101
Threat Hunting 101