Severity
Medium
Analysis Summary
CVE-2022-0540
Atlassian ira Server and Data Center and Jira Service Management Server and Data Center could allow a remote attacker to bypass security restrictions, caused by a flaw in Jira Seraph. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass authentication
Impact
Security Bypass
Indicators Of Compromise
CVE
CVE-2022-0540
Affected Vendors
Atlassian
Affected Products
- Atlassian Jira Server and Data Center 8.14.0
- Atlassian Jira Server and Data Center 8.13.17
- Atlassian Jira Server and Data Center 8.20.5
- Atlassian Jira Server and Data Center 8.21.0
Remediation
Refer to JSDSERVER-11224 for patch, upgrade or suggested workaround information.