CVE-2023-22523

CVSS 9.8 CRITICALEPSS 11.1%

Vexday Risk Score

33Attention

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 11.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

06 Dec 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Atlassian · Assets Discovery Cloud Atlassian · Assets Discovery Data Center

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html https://jira.atlassian.com/browse/JSDSERVER-14925