Atlassian Confluence Unauthorized Admin Account (CVE-2023-22515)

What is the Attack?

The vulnerability attack is targeting an authentication bypass flaw in Atlassian Confluence Server and Confluence Data Center. The vulnerability is due to insufficient validation of user-supplied inputs. A successful exploitation may create an administrator account on the vulnerable server.


What is the Vendor Solution?


Atlassian released software updates to the affected products. For more information, click here.



What FortiGuard Coverage is available?

FortiGuard Labs has an IPS signature "Atlassian.Confluence.Unauthorized.Admin.Account.Creation" to detect and block any attack targeting …

account admin atlassian atlassian confluence atlassian confluence server attack authentication authentication bypass authentication bypass flaw bypass center confluence confluence data center confluence server cve cve-2023-22515 data data center exploitation flaw inputs may server software software updates solution targeting updates validation vendor vulnerability vulnerable what is