CVE-2022-0540
Published: Apr 20, 2022
Modified: Oct 24, 2024
Description
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
| Vendor | Product | Versions |
|---|---|---|
Atlassian | Jira Core Server | affected unspecified - < 8.13.18affected 8.14.0 - < unspecifiedaffected unspecified - < 8.20.6affected 8.21.0 - < unspecifiedaffected unspecified - < 8.22.0 |
Atlassian | Jira Software Server | affected unspecified - < 8.13.18affected 8.14.0 - < unspecifiedaffected unspecified - < 8.20.6affected 8.21.0 - < unspecifiedaffected unspecified - < 8.22.0 |
Atlassian | Jira Software Data Center | affected unspecified - < 8.13.18affected 8.14.0 - < unspecifiedaffected unspecified - < 8.20.6affected 8.21.0 - < unspecifiedaffected unspecified - < 8.22.0 |
Atlassian | Jira Service Management Server | affected unspecified - < 4.13.18affected 4.14.0 - < unspecifiedaffected unspecified - < 4.20.6affected 4.21.0 - < unspecifiedaffected unspecified - < 4.22.0 |
Atlassian | Jira Service Management Data Center | affected unspecified - < 4.13.18affected 4.14.0 - < unspecifiedaffected unspecified - < 4.20.6affected 4.21.0 - < unspecifiedaffected unspecified - < 4.22.0 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now