Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138)
Severity: critical · Patch status: patched · Since 2022-07-29 · CVE-2022-26138
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group. CISA added CVE-2022-26138 to its Known Exploited Vulnerabilities catalog on Jul 29, 2022, which means attackers are exploiting it in the wild.
What to do
- Apply updates per vendor instructions.
- US federal agencies must remediate by Aug 19, 2022 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
