CVE-2023-22523

CVE Database · CVE-2023-22523

CVE-2023-22523

· HIGHModified

CVSS v3.1

8.8

EPSS

11.15%

Published

Dec 6, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products (5)

atlassian · assets_discovery_cloud (up to 3.2.0)vulnerable

atlassian · assets_discovery_data_centervulnerable

atlassian · assets_discovery_data_center (up to 6.2.0)vulnerable

atlassian · assets_discovery_data_servervulnerable

atlassian · assets_discovery_data_server (up to 6.2.0)vulnerable

References (4)

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html

Vendor Advisory

https://jira.atlassian.com/browse/JSDSERVER-14925

Issue TrackingVendor Advisory

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html

Vendor Advisory

https://jira.atlassian.com/browse/JSDSERVER-14925

Issue TrackingVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs