CVE-2022-0540: Critical severity atlassian data center vulnerability
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0540?
CVE-2022-0540 is a vulnerability in Jira Seraph that allows a remote unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request.
Which versions of Atlassian Jira Server and Data Center are affected by CVE-2022-0540?
CVE-2022-0540 affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0.
How severe is CVE-2022-0540?
CVE-2022-0540 has a severity score of 9.8, which is considered critical.
What is the official reference for CVE-2022-0540?
The official reference for CVE-2022-0540 can be found at the Atlassian Jira Security Advisory released on April 20, 2022.
How can I fix CVE-2022-0540?
To fix CVE-2022-0540, it is recommended to upgrade to Atlassian Jira Server or Data Center versions 8.13.18, 8.20.6, or 8.22.0, depending on the current version you are running.