Description (CNA)
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Assets Discovery Cloud | unaffected < 1.0.0; affected >= 1.0.0; affected >= 1.5.7.0; affected >= 1.5.7.1; affected >= 1.5.7.3; affected >= 1.5.7.4; affected >= 1.6.1.2; affected >= 1.6.2.0; affected >= 1.6.3.0; affected >= 1.6.4.0; affected >= 1.6.4.4; affected >= 1.7.0.0; affected >= 1.7.1.0; affected >= 1.7.2.0; affected >= 1.8.0.0; affected >= 1.8.1.1; affected >= 1.8.1.2; affected >= 1.8.1.3; affected >= 1.8.1.4; affected >= 1.8.1.5; affected >= 1.8.2.0; affected >= 2.0.0.0; affected >= 3.1.0; affected >= 3.1.1; affected >= 3.1.10; affected >= 3.1.11; affected >= 3.1.2; affected >= 3.1.3; affected >= 3.1.4; affected >= 3.1.5; affected >= 3.1.6; affected >= 3.1.7; affected >= 3.1.8; affected >= 3.1.9; unaffected >= 3.2.0 |
| Atlassian / Assets Discovery Data Center | unaffected < 1.0.0; affected >= 1.0.0; affected >= 3.1.0; affected >= 3.1.1; affected >= 3.1.10; affected >= 3.1.11; affected >= 3.1.2; affected >= 3.1.3; affected >= 3.1.4; affected >= 3.1.5; affected >= 3.1.6; affected >= 3.1.7; affected >= 3.1.9; affected >= 6.0.0; affected >= 6.1.10; affected >= 6.1.11; affected >= 6.1.12; affected >= 6.1.13; affected >= 6.1.14; affected >= 6.1.9; unaffected >= 6.2.0 |
CWE
No CWE identifiers supplied.
References
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
- https://jira.atlassian.com/browse/JSDSERVER-14925
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.