Critical Improper Authorization Vulnerability in Atlassian Confluence Data Center and Server

What changed

A significant vulnerability has been discovered in Atlassian Confluence Data Center and Server that allows unauthenticated attackers to reset the application and create an administrator account. This vulnerability has not yet been exploited in the wild but poses a serious risk to affected systems.

Once an attacker gains administrative access, they can execute all administrative functions, resulting in a complete compromise of the system's confidentiality, integrity, and availability.

Who is affected

All versions of Atlassian Confluence Data Center and Server are impacted by this vulnerability. Organizations using these products should be particularly vigilant.

Atlassian Cloud sites are not affected, which provides some assurance to users of the cloud-based service.

• Atlassian Confluence Data Center
• Atlassian Confluence Server
• Organizations using self-hosted Confluence instances

What to do

Immediate action is recommended for organizations running affected versions of Confluence Data Center and Server. It is crucial to assess your current version and apply necessary mitigations.

Ensure that access controls are strictly enforced and monitor for any unauthorized access attempts.

• Review and update your Confluence instance to the latest version.
• Implement strict access controls to limit exposure.
• Monitor logs for unusual activities that may indicate attempts to exploit this vulnerability.