CVE-2023-22523

high

Description

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

References

https://www.helpnetsecurity.com/2024/01/31/cvss-4-0-scoring-system/?web_view=true

https://www.theregister.com/2023/12/06/atlassian_four_rce_cves/

https://jira.atlassian.com/browse/JSDSERVER-14925

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html

Details

Source: Mitre, NVD

Published: 2023-12-06

Updated: 2023-12-11

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High