CISA Warns of Atlassian Confluence Hard-Coded Credential Bug Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday extra the not too long ago disclosed Atlassian security flaw to its Recognised Exploited Vulnerabilities Catalog, based mostly on proof of active exploitation.

The vulnerability, tracked as CVE-2022-26138, fears the use of difficult-coded qualifications when the Thoughts For Confluence application is enabled in Confluence Server and Details Middle occasions.

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

“A remote unauthenticated attacker can use these qualifications to log into Confluence and obtain all content available to people in the confluence-people group,” CISA notes in its advisory.

Depending on the web page constraints and the information a business has in Confluence, profitable exploitation of the shortcoming could lead to the disclosure of sensitive info.

While the bug was addressed by the Atlassian software package firm very last week in versions 2.7.38 and 3..5, it has because arrive below active exploitation, cybersecurity business Rapid7 disclosed this week.

“Exploitation endeavours at this place do not look to be very widespread, even though we hope that to alter,” Erick Galinkin, principal AI researcher at Immediate7, informed The Hacker News.

“The superior information is that the vulnerability is in the Questions for Confluence app and not in Confluence itself, which lowers the attack area considerably.”

With the flaw now included to the catalog, Federal Civilian Govt Department (FCEB) in the U.S. are mandated to apply patches by August 19, 2022, to reduce their publicity to cyberattacks.

“At this level, the vulnerability has been public for a fairly limited quantity of time,” Galinkin noted. “Coupled with the absence of meaningful write-up-exploitation exercise, we will not however have any menace actors attributed to the attacks.”

Uncovered this report intriguing? Observe THN on Fb, Twitter  and LinkedIn to study additional exceptional articles we submit.