nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Jira Security advisory for CVE-2022-0540 - Authentication bypass in Seraph

Teresa Luis

Hi, still very new to Jira. I am not able to upgrade today so I need to do the workaround on this. If I look at User-Installed Apps in my Manage Apps, that will be where any Marketplace apps are correct? So if they are not listed there I don't need to worry about "List of affected Atlassian Marketplace apps" section.

Also, I disabled Mobile Plugin for Jira and can't find "Insight - Asset Management in that list either" Could that be listed anywhere else?

Thanks for you help!

Teresa

Accepted answers

Robert Wen_Cprime_

Hello, @Teresa Luis !

1. Yes, compare the User-installed apps against the list of affected Atlassian Marketplace apps. If you don't have any on the list, you're good!

2. Insight was recently bundled into Jira Service Management Data Center 8.15. If you are on that version or later, you should upgrade.

Hope this helps!

All comments

Robert Wen_Cprime_

Hello, @Teresa Luis !

1. Yes, compare the User-installed apps against the list of affected Atlassian Marketplace apps. If you don't have any on the list, you're good!

2. Insight was recently bundled into Jira Service Management Data Center 8.15. If you are on that version or later, you should upgrade.

Hope this helps!

serkan_sezer

Hi,, If you have a list of affected apps, could you please share? thank you

Robert Wen_Cprime_

The official notice from Atlassian has the list of apps. Here's the link: https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-software

jira-software-server

cve-2022-0540