Description (CNA)
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Companion for Mac | unaffected < 1.0.0; affected >= 1.0.0; affected >= 1.1.0; affected >= 1.2.0; affected >= 1.2.2; affected >= 1.2.3; affected >= 1.2.4; affected >= 1.2.5; affected >= 1.2.6; affected >= 1.3.0; affected >= 1.3.1; affected >= 1.4.1; affected >= 1.4.2; affected >= 1.4.3; affected >= 1.4.4; affected >= 1.4.5; affected >= 1.4.6; affected >= 1.5.0; affected >= 1.6.0; affected >= 1.6.1; unaffected >= 2.0.0; unaffected >= 2.0.1 |
CWE
No CWE identifiers supplied.
References
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html
- https://jira.atlassian.com/browse/CONFSERVER-93518
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.