All CVE records
CVE-2022-26138 — Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
CISA KEV listed
Added July 29, 2022 Remediate by August 19, 2022
Description
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.
Required action
Apply updates per vendor instructions.
Notes
https://confluence.atlassian.com/doc/questions-for-confluence-security-advisory-2022-07-20-1142446709.html; https://nvd.nist.gov/vuln/detail/CVE-2022-26138
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.