📌 Multiple Products Security Advisory - CVE-2022-26136, CVE-2022-26137

[#1]

This week Atlassian released an advisory detailing new CVEs affecting multiple Atlassian products, including Jira and Confluence.

Learn more: https://confluence.atlassian.com/security/multiple-products-security-advisory-cve-2022-26136-cve-2022-26137-1141493031.html

🌤 Atlassian Cloud products are not affected, per the advisory.

Another day, another CVE, am I right? Stay diligent, and happy patching. 🔒

[Robert Wen_ReleaseTEAM_]

There was another CVE released that won't affect as many people, but if affected, you should pay attention.  

CVE-2022-26138 affects those that have Questions for Confluence installed.  Older versions created an account with a hardcoded password.  Uninstalling the app won't delete the account.

Details are here: https://confluence.atlassian.com/doc/questions-for-confluence-security-advisory-2022-07-20-1142446709.html

[Dave Liao]

@Robert Wen_ReleaseTEAM_ good highlight, thanks for mentioning that! 💪 

[Taranjeet Singh]

Thank you, @Dave Liao and @Robert Wen_ReleaseTEAM_ for sharing the infirmation about these security vulnerabilities.

[Dave Liao]

@Taranjeet Singh - anytime, we've got to protect our users!

[Robert Wen_ReleaseTEAM_]

You're welcome, @Taranjeet Singh !  Happy to help!