Saturday, October 12, 2024
Follow us On Linkedin
HomeCVE/vulnerabilityCritical Flaw In Confluence Server Let Attackers Execute Arbitrary Code

Critical Flaw In Confluence Server Let Attackers Execute Arbitrary Code

CVE/vulnerabilityCyber Security NewsVulnerability

Published on

By Eswar
Critical Flaw In Confluence Server Let Attackers Execute Arbitrary Code

Defend malware Attacks

Malware protection

The widely used team workspace corporate wiki Confluence has been discovered to have a critical remote code execution vulnerability.

This vulnerability has been assigned with CVE-2024-21683 with a severity of 8.3 (High). 

This vulnerability affects multiple versions of Confluence Data Center and server, including Data Center version 8.9.0 and Server versions 8.5.0 through 8.5.8 LTS.

- Advertisement - SIEM as a Service

However, this vulnerability has been fixed in the latest versions of Confluence Data Center and Server.

Atlassian Internal discovered this vulnerability, and it has been fixed accordingly.

Free Webinar on Live API Attack Simulation: Book Your Seat | Start protecting your APIs from hackers

Technical Analysis –  CVE-2024-21683

According to the advisory, this vulnerability allows an authenticated attacker to execute arbitrary code in the system that could result in high impact in the CIA (Confidentiality, Integrity and Availability).

Further, this vulnerability does not require any user interaction to be successful.

Atlassian has published no other information about this vulnerability.

However, depending on the description, it can be speculated that this vulnerability was easier for an authenticated attacker to exploit.

The complete details and a proof-of-concept for this vulnerability are yet to be published.

Atlassian recommends its users upgrade their Data Centers and Servers to the latest versions below.

Data Center

Affected versionsFixed versions
8.9.08.9.1
from 8.8.0 to 8.8.18.9.1
from 8.7.0 to 8.7.28.9.1
from 8.6.0 to 8.6.28.9.1
from 8.5.0 to 8.5.8 LTS8.9.1 or 8.5.9 LTS recommended
from 8.4.0 to 8.4.58.9.1 or 8.5.9 LTS recommended
from 8.3.0 to 8.3.48.9.1 or 8.5.9 LTS recommended
from 8.2.0 to 8.2.38.9.1 or 8.5.9 LTS recommended
from 8.1.0 to 8.1.48.9.1 or 8.5.9 LTS recommended
from 8.0.0 to 8.0.48.9.1 or 8.5.9 LTS recommended
from 7.20.0 to 7.20.38.9.1 or 8.5.9 LTS recommended
from 7.19.0 to 7.19.21 LTS8.9.1 or 8.5.9 LTS recommended or 7.19.22 LTS
from 7.18.0 to 7.18.38.9.1 or 8.5.9 LTS recommended or 7.19.22 LTS
from 7.17.0 to 7.17.58.9.1 or 8.5.9 LTS recommended or 7.19.22 LTS
Any earlier versions8.9.1 or 8.5.9 LTS recommended or 7.19.22 LTS

Server

Affected versionsFixed versions
from 8.5.0 to 8.5.8 LTS8.5.9 LTS recommended
from 8.4.0 to 8.4.58.5.9 LTS recommended
from 8.3.0 to 8.3.48.5.9 LTS recommended
from 8.2.0 to 8.2.38.5.9 LTS recommended
from 8.1.0 to 8.1.48.5.9 LTS recommended
from 8.0.0 to 8.0.48.5.9 LTS recommended
from 7.20.0 to 7.20.38.5.9 LTS recommended
from 7.19.0 to 7.19.21 LTS8.5.9 LTS recommended or 7.19.22 LTS
from 7.18.0 to 7.18.38.5.9 LTS recommended or 7.19.22 LTS
from 7.17.0 to 7.17.58.5.9 LTS recommended or 7.19.22 LTS
Any earlier versions8.5.9 LTS recommended or 7.19.22 LTS

Users of Confluence are advised to upgrade to the latest versions to prevent the exploitation of these vulnerabilities by threat actors.

ANYRUN malware sandbox’s 8th Birthday Special Offer: Grab 6 Months of Free Service

Eswar
Eswar
Eswar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

cyber security

Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication

Threat actors are leveraging a newly discovered deepfake tool, ProKYC, to bypass two-factor authentication...
cyber security

Mozilla Warns Of Firefox Zero-Day Actively Exploited In Cyber Attacks

A critical use-after-free vulnerability affecting Firefox and Firefox Extended Support Release (ESR) is being...
Press Release

SpyCloud Embeds Identity Analytics in Cybercrime Investigations Solution to Accelerate Insider and Supply Chain Risk Analysis & Threat Actor Attribution

IDLink, SpyCloud’s new automated digital identity correlation capability, is now core to its industry-leading...
Press Release

Abusix and Red Sift Form New Partnership, Leveraging Automation to Mitigate Cyber Attacks

The agreement has marked over 600,000 fraudulent domains for takedown in just two months...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

Register Now

More like this

cyber security

Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication

Threat actors are leveraging a newly discovered deepfake tool, ProKYC, to bypass two-factor authentication...
Android

Hackers Exploiting Zero-day Flaw in Qualcomm Chips to Attack Android Users

Hackers exploit a zero-day vulnerability found in Qualcomm chipsets, potentially affecting millions worldwide.The flaw,...
CVE/vulnerability

Foxit PDF Reader Vulnerability Let Attackers Execute Arbitary Code

Researchers recently disclosed six new security vulnerabilities across various software, as one critical vulnerability...

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

Company

Trending

Categories

Copyright @ 20016 - 2024 GBHackers On Security - All Rights Reserved