Jira authentication bypass vulnerability

Respectful master's command:

Pleasure! Atlassian Jira Seraph Safety Announcement, Announcement Atlassian Jira Seraph Existence of the body has been confirmed by the leakage cave (CVE-2022-0540), the operation of the evacuated person is affected by the construction, the time of the development and the safety of self-examination, the effect of the evasion of the operation, the time of renewal and repair, the invasion of the evaded external attacker.

[Vulnerability Rating]

High risk

[Vulnerability description]

CVE-2022-0540

Jira is a one-stop missing item management system. Jira Seraph is Jira and Jira Service Management on the Web, where you can read the text on the web, and where you can read the text on the web.

[scope of influence]

Jira version for receiving images:

Jira < 8.13.18

Jira 8.14.x、8.15.x、8.16.x、8.17.x、8.18.x、8.19.x

Jira 8.20.x < 8.20.6

Jira 8.21.x

Jira Service Management version book:

Jira Service Management < 4.13.18

Jira Service Management 4.14.x、4.15.x、4.16.x、4.17.x、4.18.x、4.19.x

Jira Service Management 4.20.x < 4.20.6

Jira Service Management 4.21.x

[Repair Plan]

The official version of the current official version, the safe version of the official version, and the safe version.

[Reference link]

https://nvd.nist.gov/vuln/detail/CVE-2022-0540

https://jira.atlassian.com/browse/JSDSERVER-11224

https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html