PromptRiskDBThreat intelligence atlas
AI Vulnerability Context

CVE-2022-26138 - Atlassian Confluence

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.

AI Vulnerability ContextCISA KEVAtlassian

Record summary

A quick snapshot of what this page covers.

CISA KEVyesWhether CISA lists this as exploited.
Techniques0AI attack methods connected to this vulnerability.
Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEV
CVE ID
CVE-2022-26138
Vendor/project
Atlassian
Product
Confluence
Vulnerability name
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
Date added
2022-07-29
Due date
2022-08-19
Known ransomware campaign use
Unknown
CWE-798

Exploit context

What the vulnerability is about.

No description available. The source record only contains identifiers and metadata.

Source

Where this page information comes from.