All the vulnerabilites related to Atlassian - Assets Discovery Cloud
cve-2023-22523
Vulnerability from cvelistv5
Published
2023-12-06 05:00
Modified
2024-08-02 10:13
Severity ?
EPSS score ?
Summary
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
References
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:13:48.923Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jira.atlassian.com/browse/JSDSERVER-14925"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Assets Discovery Cloud",
"vendor": "Atlassian",
"versions": [
{
"status": "unaffected",
"version": "\u003c 1.0.0"
},
{
"status": "affected",
"version": "\u003e= 1.0.0"
},
{
"status": "affected",
"version": "\u003e= 1.5.7.0"
},
{
"status": "affected",
"version": "\u003e= 1.5.7.1"
},
{
"status": "affected",
"version": "\u003e= 1.5.7.3"
},
{
"status": "affected",
"version": "\u003e= 1.5.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.6.1.2"
},
{
"status": "affected",
"version": "\u003e= 1.6.2.0"
},
{
"status": "affected",
"version": "\u003e= 1.6.3.0"
},
{
"status": "affected",
"version": "\u003e= 1.6.4.0"
},
{
"status": "affected",
"version": "\u003e= 1.6.4.4"
},
{
"status": "affected",
"version": "\u003e= 1.7.0.0"
},
{
"status": "affected",
"version": "\u003e= 1.7.1.0"
},
{
"status": "affected",
"version": "\u003e= 1.7.2.0"
},
{
"status": "affected",
"version": "\u003e= 1.8.0.0"
},
{
"status": "affected",
"version": "\u003e= 1.8.1.1"
},
{
"status": "affected",
"version": "\u003e= 1.8.1.2"
},
{
"status": "affected",
"version": "\u003e= 1.8.1.3"
},
{
"status": "affected",
"version": "\u003e= 1.8.1.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.1.5"
},
{
"status": "affected",
"version": "\u003e= 1.8.2.0"
},
{
"status": "affected",
"version": "\u003e= 2.0.0.0"
},
{
"status": "affected",
"version": "\u003e= 3.1.0"
},
{
"status": "affected",
"version": "\u003e= 3.1.1"
},
{
"status": "affected",
"version": "\u003e= 3.1.10"
},
{
"status": "affected",
"version": "\u003e= 3.1.11"
},
{
"status": "affected",
"version": "\u003e= 3.1.2"
},
{
"status": "affected",
"version": "\u003e= 3.1.3"
},
{
"status": "affected",
"version": "\u003e= 3.1.4"
},
{
"status": "affected",
"version": "\u003e= 3.1.5"
},
{
"status": "affected",
"version": "\u003e= 3.1.6"
},
{
"status": "affected",
"version": "\u003e= 3.1.7"
},
{
"status": "affected",
"version": "\u003e= 3.1.8"
},
{
"status": "affected",
"version": "\u003e= 3.1.9"
},
{
"status": "unaffected",
"version": "\u003e= 3.2.0"
}
]
},
{
"product": "Assets Discovery Data Center",
"vendor": "Atlassian",
"versions": [
{
"status": "unaffected",
"version": "\u003c 1.0.0"
},
{
"status": "affected",
"version": "\u003e= 1.0.0"
},
{
"status": "affected",
"version": "\u003e= 3.1.0"
},
{
"status": "affected",
"version": "\u003e= 3.1.1"
},
{
"status": "affected",
"version": "\u003e= 3.1.10"
},
{
"status": "affected",
"version": "\u003e= 3.1.11"
},
{
"status": "affected",
"version": "\u003e= 3.1.2"
},
{
"status": "affected",
"version": "\u003e= 3.1.3"
},
{
"status": "affected",
"version": "\u003e= 3.1.4"
},
{
"status": "affected",
"version": "\u003e= 3.1.5"
},
{
"status": "affected",
"version": "\u003e= 3.1.6"
},
{
"status": "affected",
"version": "\u003e= 3.1.7"
},
{
"status": "affected",
"version": "\u003e= 3.1.9"
},
{
"status": "affected",
"version": "\u003e= 6.0.0"
},
{
"status": "affected",
"version": "\u003e= 6.1.10"
},
{
"status": "affected",
"version": "\u003e= 6.1.11"
},
{
"status": "affected",
"version": "\u003e= 6.1.12"
},
{
"status": "affected",
"version": "\u003e= 6.1.13"
},
{
"status": "affected",
"version": "\u003e= 6.1.14"
},
{
"status": "affected",
"version": "\u003e= 6.1.9"
},
{
"status": "unaffected",
"version": "\u003e= 6.2.0"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Bug Bounty"
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "RCE (Remote Code Execution)",
"lang": "en",
"type": "RCE (Remote Code Execution)"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-06T15:30:00.483Z",
"orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
"shortName": "atlassian"
},
"references": [
{
"url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html"
},
{
"url": "https://jira.atlassian.com/browse/JSDSERVER-14925"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
"assignerShortName": "atlassian",
"cveId": "CVE-2023-22523",
"datePublished": "2023-12-06T05:00:02.793Z",
"dateReserved": "2023-01-01T00:01:22.333Z",
"dateUpdated": "2024-08-02T10:13:48.923Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}