Vulnerabilities > CVE-2023-22523 - Unspecified vulnerability in Atlassian products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

atlassian

NVD

Published: 2023-12-06

Updated: 2023-12-11

Summary

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

Vulnerable Configurations

Part	Description	Count
Application	Atlassian Atlassian Assets Discovery Data Server 1.0.0 Atlassian Assets Discovery Data Server 3.1.0 Atlassian Assets Discovery Data Server 3.1.1 Atlassian Assets Discovery Data Server 3.1.2 Atlassian Assets Discovery Data Server 3.1.3 Atlassian Assets Discovery Data Server 3.1.4 Atlassian Assets Discovery Data Server 3.1.5 Atlassian Assets Discovery Data Server 3.1.6 Atlassian Assets Discovery Data Server 3.1.7 Atlassian Assets Discovery Data Server 3.1.9 Atlassian Assets Discovery Data Server 3.1.10 Atlassian Assets Discovery Data Server 3.1.11 Atlassian Assets Discovery Data Server 6.0.0 Atlassian Assets Discovery Data Server 6.1.9 Atlassian Assets Discovery Data Server 6.1.10 Atlassian Assets Discovery Data Server 6.1.11 Atlassian Assets Discovery Data Server 6.1.12 Atlassian Assets Discovery Data Server 6.1.13 Atlassian Assets Discovery Data Server 6.1.14 Atlassian Assets Discovery Data Center 6.0.0 Atlassian Assets Discovery Data Center 6.1.9 Atlassian Assets Discovery Data Center 6.1.10 Atlassian Assets Discovery Data Center 6.1.11 Atlassian Assets Discovery Data Center 6.1.12 Atlassian Assets Discovery Data Center 6.1.13 Atlassian Assets Discovery Data Center 6.1.14 Atlassian Assets Discovery Data Center 1.0.0 Atlassian Assets Discovery Data Center 3.1.0 Atlassian Assets Discovery Data Center 3.1.1 Atlassian Assets Discovery Data Center 3.1.2 Atlassian Assets Discovery Data Center 3.1.3 Atlassian Assets Discovery Data Center 3.1.4 Atlassian Assets Discovery Data Center 3.1.5 Atlassian Assets Discovery Data Center 3.1.6 Atlassian Assets Discovery Data Center 3.1.7 Atlassian Assets Discovery Data Center 3.1.9 Atlassian Assets Discovery Data Center 3.1.10 Atlassian Assets Discovery Data Center 3.1.11 Atlassian Assets Discovery Cloud 1.0.0 Atlassian Assets Discovery Cloud 1.5.7.0 Atlassian Assets Discovery Cloud 1.5.7.1 Atlassian Assets Discovery Cloud 1.5.7.3 Atlassian Assets Discovery Cloud 1.5.7.4 Atlassian Assets Discovery Cloud 1.6.1.2 Atlassian Assets Discovery Cloud 1.6.2.0 Atlassian Assets Discovery Cloud 1.6.3.0 Atlassian Assets Discovery Cloud 1.6.4.0 Atlassian Assets Discovery Cloud 1.6.4.4 Atlassian Assets Discovery Cloud 1.7.0.0 Atlassian Assets Discovery Cloud 1.7.1.0 Atlassian Assets Discovery Cloud 1.7.2.0 Atlassian Assets Discovery Cloud 1.8.0.0 Atlassian Assets Discovery Cloud 1.8.1.1 Atlassian Assets Discovery Cloud 1.8.1.2 Atlassian Assets Discovery Cloud 1.8.1.3 Atlassian Assets Discovery Cloud 1.8.1.4 Atlassian Assets Discovery Cloud 1.8.1.5 Atlassian Assets Discovery Cloud 1.8.2.0 Atlassian Assets Discovery Cloud 2.0.0.0 Atlassian Assets Discovery Cloud 3.1.0 Atlassian Assets Discovery Cloud 3.1.1 Atlassian Assets Discovery Cloud 3.1.2 Atlassian Assets Discovery Cloud 3.1.3 Atlassian Assets Discovery Cloud 3.1.4 Atlassian Assets Discovery Cloud 3.1.5 Atlassian Assets Discovery Cloud 3.1.6 Atlassian Assets Discovery Cloud 3.1.7 Atlassian Assets Discovery Cloud 3.1.8 Atlassian Assets Discovery Cloud 3.1.9 Atlassian Assets Discovery Cloud 3.1.10 Atlassian Assets Discovery Cloud 3.1.11	71

Summary

Vulnerable Configurations

References