Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,295,547
Community Members
 
Community Events
165
Community Groups

CVE-2022-26134 - Confluence Server and Data Center versions after 1.3.0 are affected. ?

We have some very old Confluence 2.10 servers running. Is it reasonable to assume that these are NOT impacted by the CVE-2022-26134 vulnerability based on the following statement in the CVE-2022-26134 document?

"Confluence Server and Data Center versions after 1.3.0 are affected."

 

Thanks.

 

1 answer

0 votes
Andy Heinzer Atlassian Team Jun 08, 2022

Unfortunately, no.  Even these very old versions are susceptible to this vulnerability.  The Advisory itself does provide some mitigation steps for more recent versions.  You might be able to reduce the risk by restricting network access to this Confluence application. But give the nature of a RCE (Remote code execution) type vulnerability, out of an abundance of caution, Atlassian still recommends upgrading these old versions to supported versions that contain this fix.

Yeah, the problem is we recently evaluated what it would take to migrate to the current cloud release and it involved about a 4 version step process, not something we can do quickly or easily.

What would our migration path look like  in order to get from our current 2.10.3 Confluence to the min. spec supported version that is patched?

Andy Heinzer Atlassian Team Jun 08, 2022

There are steps to follow in Upgrading Confluence Manually that explain the necessary versions to upgrade to in sequence.  It would require multiple upgrades in order to get that data onto a supported platform.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Confluence

Confluence: Where work and wellness meet

Feeling overwhelmed by the demands of work and life? With a 25% increase in the prevalence of anxiety and depression worldwide during the pandemic, for most of us, it’s a resounding yes . 🙋‍♀️ ...

916 views 12 27
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you