Is CVE-2022-0540 actively exploited?

CVE-2022-0540 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2022-0540?

CVE-2022-0540 has a CVSS score of 9.8 (CRITICAL severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2022-0540?

Patch guidance is available from atlassian security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2022-0540.

Fix CVE-2022-0540 - CRITICAL atlassian jira data center

Q: Which products are affected by CVE-2022-0540?

12 products: atlassian jira data center, atlassian jira data center, atlassian jira data center, atlassian jira server, atlassian jira server, and 7 more.

Description

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: NVD-CWE-noinfoCWE-287 · Improper Authentication

Metadata

Primary Vendor: ATLASSIAN
Published: 4/20/2022
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

atlassian : jira_data_centeratlassian : jira_data_centeratlassian : jira_data_centeratlassian : jira_serveratlassian : jira_serveratlassian : jira_serveratlassian : jira_service_managementatlassian : jira_service_managementatlassian : jira_service_managementatlassian : jira_service_managementatlassian : jira_service_managementatlassian : jira_service_management

Remediation Guidance

Executive Summary

View on NIST NVD