Atlassian Confluence < 8.5.4 RCE (CONFSERVER-93833)

critical Nessus 插件 ID 188068

版本 1.9

Jun 5, 2024, 10:55 AM

  • Required Scan configuration ("Enable cgi scanning" set to "True")

Plugin Feed: 202406051055

版本 1.8

Feb 23, 2024, 12:38 PM

  • IAVM reference

Plugin Feed: 202402231238

版本 1.7

Jan 29, 2024, 4:10 PM

  • Exploit attributes ("Exploit framework core" set to "True")

Plugin Feed: 202401291610

版本 1.6

Jan 29, 2024, 2:15 PM

  • Exploit attributes ("Exploit framework core" set to "True")

Plugin Feed: 202401291415

版本 1.6

Jan 26, 2024, 3:21 PM

  • Exploit attributes ("Exploit framework metasploit" set to "True")

Plugin Feed: 202401261521

版本 1.5

Jan 24, 2024, 11:21 PM

  • CISA reference
  • CVSS metrics ("CVSSv2 score" set to 10.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 9.8)
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • CVSSv2 severity (based on CVE-2023-22527, severity increased from "Medium" to "High")

Plugin Feed: 202401242321

版本 1.4

Jan 24, 2024, 7:17 PM

  • Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")

Plugin Feed: 202401241917

版本 1.3

Jan 19, 2024, 2:06 PM

  • IAVM reference
  • STIG Severity (set to "I")

Plugin Feed: 202401191406

版本 1.2

Jan 17, 2024, 2:38 PM

  • CVSSv2 severity (based on CVE-2023-22527, severity decreased from "High" to "Medium")
  • CVSS metrics ("CVSSv2 score" set to 6.4. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N")

Plugin Feed: 202401171438

版本 1.1

Jan 17, 2024, 12:13 AM

  • CEA reference

Plugin Feed: 202401170013

版本 1.0

Jan 16, 2024, 5:39 PM

  • New

Plugin Feed: 202401161739

版本 1.0

Jan 16, 2024, 8:55 PM

  • CEA reference

Plugin Feed: 202401162055

* Changelogs are generally available for changes made after Nov 1, 2022