CVE-2023-22501 Auth bypass in Jira Service Management Data Center
Attackers can impersonate users and gain access to Jira Service Management instances by exploiting signup tokens under specific configuration conditions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22501?
CVE-2023-22501 is a critical authentication bypass vulnerability in Atlassian Jira Service Management Data Center, published on 1 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances_._ With write access to a User Directory and outgoing email enabled on a Jira Service Management instance, an attacker could gain access to signup tokens sent to users with accounts that have never been logged into. Access to these tokens can be obtained in two cases:
* If the attacker is included on Jira issues or requests with these users, or * If the attacker is forwarded or otherwise gains access to emails containing a “View Request” link from these users.
Bot accounts are particularly susceptible to this scenario. On instances with single sign-on, external customer accounts can be affected in projects where anyone can create their own account.
Weakness: CWE-287
Which versions are affected by CVE-2023-22501?
It affects 1 product.
Products include Atlassian Jira Service Management.
How do I fix CVE-2023-22501?
No fix has been published for CVE-2023-22501 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-22501 being exploited?
There is no known exploitation of CVE-2023-22501 in the wild and no public exploit code.
Other vulnerabilities in Atlassian Jira Service Management Data Center
- CVE-2021-43943 Cross-site scripting in Jira Service Management Data Center
- CVE-2022-36800 Information disclosure in Jira Service Management Data Center
- CVE-2021-43948 Missing authorization in Jira Service Management Data Center
- CVE-2021-43950 Missing authorization in Jira Service Management Data Center
- CVE-2021-43949 Missing authorization in Jira Service Management Data Center
Sources
Also known as GHSA-jm25-87xp-4h76.