Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Broken access control in Confluence Server and Data Center (CVE-2023-22515) - Vulnerability Database

Broken access control in Confluence Server and Data Center (CVE-2023-22515)

Description

Due to a broken access control vulnerability in Confluence, an unauthenticated attacker can create an administrator account and get full access to the system

Remediation

Upgrade to the latest version of Confluence

References

CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
CVE-2023-22515

Related Vulnerabilities

VMware directory traversal and privilege escalation vulnerabilities High
Common tags: Known Vulnerabilities Privilege Escalation
VirtueMart access control bypass High
Common tags: Known Vulnerabilities Privilege Escalation
Improper Authorization in Confluence Server and Data Center (CVE-2023-22518) Critical
Common tags: Known Vulnerabilities Privilege Escalation
SharePoint CVE-2020-0980 Vulnerability (CVE-2020-0980) High
Common tags: Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0933) Medium
Common tags: Known Vulnerabilities

Severity

Critical

Classification

CVE-2023-22515
CWE-284
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Known Vulnerabilities
Privilege Escalation