On June 2, 2022, Atlassian, developer of tools such as Jira and Trello, published a security advisory for the vulnerability CVE-2022-26134. This is a critical unauthenticated remote code execution vulnerability in Confluence Server and Data Center. The vulnerability is rated as critical and can be easily exploited.
Which versions are affected?
All versions of Confluence Server and Data Center prior to the fixed versions listed below are affected by this vulnerability.
Atlassian recommends upgrading to the latest long-term support version. For a detailed description of the latest version, please view the Confluence Server and Data Center release notes.
The following versions contain the patch for the vulnerability:
You can download the latest version from the Download Center.
After announcement of the new vulnerability, our go.lywand.com platform was updated.
The vulnerability can be identified in the course of lywand's security audits.
We have entered into a distribution partnership with campusLan, the leading distributor for the education sector in the DACH region. Together with the Austrian distribution partners, we want to bring educational institutions of all sizes to the next level of cyber security.
In the world of cybercrime, attacks are becoming more efficient and specific. Thanks to automated malware campaigns that use exploit kits to search for vulnerabilities, cybercriminals ace the game. Companies now face the challenge of minimizing their attack surface and eliminating their vulnerabilities.