Jira is under flaw CVE-2022-0540

[Alfred Wong]

Jira is under flaw CVE-2022-0540 and comes with a severity rating of 9.9. It allows a remote attacker to bypass authentication by sending a specially crafted HTTP request to vulnerable endpoints.

Could you please arrange patch deployment on this flaw as soon as possible. Thanks

Reference Link
https://www.bleepingcomputer.com/news/security/atlassian-fixes-critical-jira-authentication-bypass-vulnerability/

[Fabio Racobaldo _Catworkx_]

Hi @Alfred Wong ,

welcome to the Atlassian community!

Please take a look to the following article https://confluence.atlassian.com/kb/faq-for-cve-2022-0540-1123193843.html

Hope this helps,

Fabio