Threat Actors Exploit Atlassian Confluence CVE-2023-22515 for Initial Access to Networks

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA) regarding the active exploitation of CVE-2023-22515, a critical Broken Access Control vulnerability affecting Atlassian Confluence Data Center and Server versions. The vulnerability enables threat actors to create unauthorized Confluence administrator accounts and access Confluence instances. CISA, FBI, and MS-ISAC strongly encourage network administrators to immediately apply the upgrades provided by Atlassian to mitigate the risk of exploitation.