PT-2022-2325 · Atlassian · Jira Service Management Server+2

Khoadha · Published 2022-04-20 · Updated 2026-03-10 · CVE-2022-0540

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.13.18 Atlassian Jira Server and Data Center versions 8.14.0 through 8.20.6 Atlassian Jira Server and Data Center versions 8.21.0 through 8.22.0 Atlassian Jira Service Management Server and Data Center versions prior to 4.13.18 Atlassian Jira Service Management Server and Data Center versions 4.14.0 through 4.20.6 Atlassian Jira Service Management Server and Data Center versions 4.21.0 through 4.22.0

Description A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This issue is related to deficiencies in the authentication procedure. The exploitation of this vulnerability may allow an attacker to elevate their privileges. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Atlassian Jira Server and Data Center versions prior to 8.13.18, update to version 8.13.18 or later. For Atlassian Jira Server and Data Center versions 8.14.0 through 8.20.6, update to version 8.20.6 or later. For Atlassian Jira Server and Data Center versions 8.21.0 through 8.22.0, update to version 8.22.0 or later. For Atlassian Jira Service Management Server and Data Center versions prior to 4.13.18, update to version 4.13.18 or later. For Atlassian Jira Service Management Server and Data Center versions 4.14.0 through 4.20.6, update to version 4.20.6 or later. For Atlassian Jira Service Management Server and Data Center versions 4.21.0 through 4.22.0, update to version 4.22.0 or later. As a temporary workaround, consider disabling vulnerable applications or restricting their use until a patch is available. If updating is not possible, update vulnerable applications if their authors have released a fix, or refrain from using them until a fix is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-02565

CVE-2022-0540

Affected Products

Jira

Jira Seraph

Jira Service Management Server

References · 24

• 🔥 https://github.com/Pear1y/CVE-2022-0540-RCE · Exploit
• 🔥 https://github.com/Pear1y/CVE-2022-0540-Preauth-RCE · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0540 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0540 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02565 · Security Note
• https://jira.atlassian.com/browse/JSDSERVER-11224 · Vendor Advisory
• https://jira.atlassian.com/browse/JRASERVER-73650 · Vendor Advisory
• https://confluence.atlassian.com/display/JIRA/Jira+Security+Advisory+2022-04-20 · Vendor Advisory
• https://t.me/ckure/11246 · Telegram Post
• https://t.me/pentestingnews/22240 · Telegram Post
• https://t.me/true_secator/2885 · Telegram Post
• https://t.me/poxek/2342 · Telegram Post
• https://t.me/cibsecurity/41191 · Telegram Post
• https://t.me/thebugbountyhunter/6281 · Telegram Post
• https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html · Note