Description (CNA)
This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 8.3, allows an attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center and Server 8.5: Upgrade to a release greater than or equal to 8.5.25 Confluence Data Center and Server 9.2: Upgrade to a release greater than or equal to 9.2.7 Confluence Data Center and Server 10.0: Upgrade to a release greater than or equal to 10.0.2 See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]). This vulnerability was reported via our Atlassian (Internal) program.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Confluence Data Center | affected 9.5.1 to 9.5.4; affected 9.4.0 to 9.4.1; affected 9.3.1 to 9.3.2; affected 9.2.0 to 9.2.6; affected 9.1.0 to 9.1.1; affected 9.0.1 to 9.0.3; affected 8.9.0 to 8.9.8; affected 8.8.0 to 8.8.1; affected 8.7.1 to 8.7.2; affected 8.6.1 to 8.6.2; affected 8.5.3 to 8.5.24; affected 7.19.16 to 7.19.30; unaffected 10.0.2 to 10.0.3; unaffected 9.2.7 to 9.2.9; unaffected 8.5.25 to 8.5.27 |
CWE
No CWE identifiers supplied.
References
- https://confluence.atlassian.com/pages/viewpage.action?pageId=1652920034
- https://jira.atlassian.com/browse/CONFSERVER-100907
ADP enrichment
No English description supplied.
No references supplied.