2026-10-22 23:51:34 +08:00

451 lines
22 KiB
HTML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!DOCTYPE html><html lang="zh-Hant" theme-color="default" theme-mode=""><head>
<meta charset="UTF-8">
<title>Jira 身份認證繞過漏洞 - JSKCloud</title>
<meta name="keywords" content="幫助文檔">
<meta name="description" content="我們的幫助文檔提供了豐富的資料和資源,包括產品手冊、技術文檔等。您可以輕鬆地找到所需的信息,幫助您更好地瞭解我們的產品和服務。我們不斷更新和完善文檔,確保您始終能夠獲得最新的信息。">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Language" content="zh-hk">
<link rel="stylesheet" href="../../assets/92c1df3730f31c-iconfont.css">
<link rel="stylesheet" href="../../assets/7bd641cba5f6a0-reset.css">
<link rel="stylesheet" href="../../assets/478794f28834cd-style.css">
<link rel="stylesheet" href="../../assets/e5adc0b1fcadda-theme.css">
<link rel="stylesheet" href="../../assets/054352c1c64ab4-common.css">
<link rel="stylesheet" href="../../assets/51c94e2cd9af75-animate.css">
<script src="../../assets/dea655e39abf18-jquery-3.5.1.min.js"></script>
<link rel="stylesheet" href="../../assets/43319114264162-bootstrap.min.css">
<script src="../../assets/b7c64cb3919aba-bootstrap.min.js"></script>
<link rel="stylesheet" href="../../assets/c7ac28884e5076-swiper-bundle.min.css">
<script src="../../assets/130071f2a87d70-swiper-bundle.min.js"></script>
<link rel="stylesheet" href="../../assets/b828918322b016-document.css">
<style>
/* 移动端适配 */
@media (max-width: 768px) {
/* 横幅区域优化 */
.server-banner2.banner-document {
padding: 30px 0;
}
.server-banner2 .section-content {
padding: 0 15px;
}
.server-banner2 h1 {
font-size: 24px;
margin-bottom: 12px;
}
.server-banner-desc2 {
font-size: 14px;
line-height: 1.6;
margin-bottom: 25px;
}
/* 搜索框适配 */
.input-search {
width: 100%;
flex-direction: column;
}
#document-input {
width: 100% !important;
margin-bottom: 10px;
height: 44px !important;
}
.search-btn {
width: 100% !important;
/* height: 44px !important;
line-height: 44px !important; */
text-align: center;
}
/* 文档列表适配 */
.docement-list {
margin: 0;
flex-direction: column;
}
.docement-list .document-box {
width: 100%;
min-height: auto;
margin: 10px 0;
padding: 20px;
box-sizing: border-box;
}
.document-box .document-header {
padding-bottom: 15px;
}
.document-box a {
font-size: 14px;
line-height: 1.6;
height: auto;
}
/* 隐藏桌面端导航 */
.page .nav-left {
display: none;
}
.page .nav-right,
.page .content-page {
padding-left: 0;
left: 0;
}
/* 内容区域优化 */
.page .page-content {
padding: 20px 15px;
margin-left: 0;
height: auto;
}
.document-cont {
padding: 20px 0 !important;
}
/* 文档详情适配 */
.document-details .document-view-item .document-view-cont {
padding: 15px;
}
.document-details .document-view-item .document-view-cont a {
width: 100%;
padding-right: 0;
}
}
/* 小屏幕优化 (≤480px) */
@media (max-width: 480px) {
.document-box {
padding: 15px !important;
}
.document-header img {
width: 24px !important;
height: 24px !important;
}
.document-details .document-view-head {
padding-left: 15px !important;
}
.page .page-content .document-head h2 {
font-size: 20px;
}
}
</style>
<link rel="canonical" href="5.html"><link rel="alternate" hreflang="zh-Hans" href="../../zh-cn/announce/5.html"><link rel="alternate" hreflang="zh-Hant" href="5.html"><link rel="alternate" hreflang="en" href="../../en/announce/5.html"><link rel="stylesheet" href="../../assets/site.css"><link rel="stylesheet" href="../../assets/96b2574c658cc1-css2.css"><link rel="stylesheet" href="../../assets/9ea408106ae79c-css2.css"><link rel="stylesheet" href="../../assets/95f8d834964d8a-css2.css"></head>
<body data-static-site="jskcloud"><header><style>
/* 语言选择器样式 */
.language-selector {
position: relative;
margin-right: 20px;
cursor: pointer;
z-index: 99999;
}
.language-selected {
display: flex;
align-items: center;
padding: 8px 12px;
border-radius: 6px;
background-color: rgba(255, 255, 255, 0.1);
transition: all 0.3s ease;
}
.language-selected:hover {
background-color: rgba(255, 255, 255, 0.2);
}
.language-flag {
margin-right: 8px;
font-size: 16px;
}
.language-code {
font-weight: 500;
margin-right: 8px;
}
.language-arrow {
transition: transform 0.3s ease;
}
.language-selector.active .language-arrow {
transform: rotate(180deg);
}
.language-dropdown {
position: absolute;
top: 100%;
/* right: 0; */
width: 140px;
background: #fff;
border-radius: 8px;
box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
opacity: 0;
visibility: hidden;
transform: translateY(10px);
transition: all 0.3s ease;
z-index: 1000;
}
.language-selector.active .language-dropdown {
opacity: 1;
visibility: visible;
transform: translateY(0);
}
.language-option {
display: flex;
align-items: center;
padding: 10px 12px;
color: #333;
transition: all 0.2s ease;
}
.language-option:hover {
background-color: #f5f5f5;
}
.language-option .language-flag {
margin-right: 10px;
}
.language-name {
font-size: 14px;
}
</style>
<div class="nav-shadow">
<div class="section-content nav-header">
<div class="nav-left">
<div class="nav-icon">
<a href="../index.html"><img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt=""></a>
</div>
<div class="nav-menu">
<div>
<a href="../index.html">
<div class="nav-item">產品中心</div>
</a>
<div class="nav-cont">
<div class="section-content">
<div class="nav-cont-menu animated slideInDown">
<div class="nav-content ">
<a href="../cloud.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">雲服務器</div>
</div>
</div>
</a>
<a href="../dedicated.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">獨立服務器</div>
</div>
</div>
</a>
<a href="../balance.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">負載均衡</div>
</div>
</div>
</a>
<a href="../box.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">BOX服務器</div>
</div>
</div>
</a>
</div>
</div>
</div>
</div>
</div>
<div>
<a href="../index.html">
<div class="nav-item">關於我們</div>
</a>
<div class="nav-cont">
<div class="section-content">
<div class="nav-cont-menu animated slideInDown">
<div class="nav-content ">
<a href="../about.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">公司簡介</div>
</div>
</div>
</a>
<a href="../contact.html">
<div class="nav-item-box">
<div class="item-box-title">
<div class="title">聯繫我們</div>
</div>
</div>
</a>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="mobile-menu-btn" id="mobileMenuBtn"></div>
</div>
<div class="nav-right">
<div class="language-selector">
<div class="language-selected">
<span class="language-flag">🌐</span>
<span class="language-code">繁體中文</span>
<svg class="language-arrow" width="10" height="6" viewBox="0 0 10 6" fill="none" xmlns="http://www.w3.org/2000/svg">
<path d="M1 1L5 5L9 1" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path>
</svg>
</div>
<div class="language-dropdown">
<a class="language-option" data-lang="en" href="../../en/announce/5.html" lang="en" hreflang="en">English</a>
<a class="language-option" data-lang="zh-cn" href="../../zh-cn/announce/5.html" lang="zh-cn" hreflang="zh-cn">简体中文</a>
<a class="language-option" data-lang="zh-hk" href="5.html" lang="zh-hk" hreflang="zh-hk" aria-current="true">繁體中文</a>
</div>
</div>
</div>
</div>
</div>
<div class="aside-tools">
<div class="tools-list">
<div class="tools-item">
<img src="../../assets/82c093ab92edb0-f801662fa2daa58d6b518f4642a32aed1742560323-tg.jpg" alt="">
<div class="tools-box">
<div class="tools-box-s">
<h5>聯繫客服</h5>
<p><a target="_blank" href="https://t.me/JSK215" rel="noopener noreferrer"> 客服 - 覺覺</a></p>
<p><a target="_blank" href="https://t.me/JSKdang" rel="noopener noreferrer"> 客服 - 叮噹</a></p>
<p><a target="_blank" href="https://t.me/JSKyoumi" rel="noopener noreferrer"> 客服 - 優米</a></p>
<p><a target="_blank" href="https://t.me/JSK_666" rel="noopener noreferrer"> 客服 - 千禧</a></p>
<p><a target="_blank" href="https://t.me/JSK116" rel="noopener noreferrer"> 客服 - 熊貓</a></p>
<p><a target="_blank" href="https://t.me/JSK0003" rel="noopener noreferrer"> 客服 - 鬧鬧</a></p>
<p><a target="_blank" href="https://t.me/JSK88801" rel="noopener noreferrer"> 客服 - 詩詩</a></p>
<p><a target="_blank" href="https://t.me/JSKyaoyao" rel="noopener noreferrer"> 客服 - 夢瑤</a></p> </div>
</div>
</div>
</div>
</div>
</header><main class="static-main"><article class="static-article"><h1>Jira 身份認證繞過漏洞</h1><div class="static-date">2023-03-31</div>
<div data-version="3.0.0" data-hash="0d6d6d6f3aa18054dfb5de9b5ab87a9e">&nbsp;</div>
<div>
<div class="document">
<div class="section">
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">尊敬的主題雲用户:</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px; text-indent: 21pt;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">您好!Atlassian官方發佈安全公告,披露Atlassian Jira Seraph 存在身份驗證繞過漏洞(CVE-2022-0540),為避免您的業務受影響建議您及時開展安全自查,如在受影響範圍,請及時更新修復,避免被外部攻擊者入侵。</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞評級】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">高風險</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞描述】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">CVE-2022-0540</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira是一個缺陷跟蹤管理系統,為針對缺陷管理、任務追蹤和項目管理的商業性應用軟件。Jira Seraph是Jira 和 Jira Service Management 在 Web 身份驗證的框架,未經身份驗證的遠程攻擊者可利用Jira Seraph中的該漏洞,通過發送特製的 HTTP 請求繞過身份驗證。</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【影響範圍】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">受影響的Jira版本:</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira &lt; 8.13.18</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira 8.14.x、8.15.x、8.16.x、8.17.x、8.18.x、8.19.x</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira 8.20.x &lt; 8.20.6</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira 8.21.x</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">受影響的Jira Service Management版本:</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira Service Management &lt; 4.13.18</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira Service Management 4.14.x、4.15.x、4.16.x、4.17.x、4.18.x、4.19.x</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira Service Management 4.20.x &lt; 4.20.6</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">Jira Service Management 4.21.x</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【修復方案】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">目前官方已發佈漏洞補丁及修復版本,請受影響的用户酌情升級至安全版本。</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【參考鏈接】</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://nvd.nist.gov/vuln/detail/CVE-2022-0540</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://jira.atlassian.com/browse/JSDSERVER-11224</span></p>
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html</span></p>
</div>
</div>
</div>
<a class="static-back" href="../announce.html">返回列表</a></article></main><footer class="section footer index">
<div class="section-content section-p">
<div class="footer-content">
<div class="footer-nav">
<div class="footer-logo">
<img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt="">
</div>
<div class="footer-nav-left">
<div class="footer-nav-box">
<div class="footer-nav-head">產品中心</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../cloud.html">雲服務器</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../dedicated.html">獨立服務器</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../balance.html">負載均衡</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../box.html">Box服務器</a></div>
</div>
</div>
<div class="footer-nav-box">
<div class="footer-nav-head">技術支持</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../document.html">技術文檔</a></div>
</div>
</div>
<div class="footer-nav-box">
<div class="footer-nav-head">關於我們</div>
<div class="footer-nav-cont">
<div class="footer-nav-item"><a class="link-hover" href="../about.html">公司簡介</a></div>
<div class="footer-nav-item"><a class="link-hover" href="../contact.html">聯繫我們</a></div>
</div>
</div>
</div>
<div class="footer-nav-right">
<div class="footer-nav-box"><div class="footer-nav-head">聯繫我們</div><div class="footer-nav-cont"><div class="footer-nav-item">JSKCloud.net</div><div class="footer-nav-item mt-20"><a class="link-hover" href="https://t.me/JSKCDN999" target="_blank" rel="noopener noreferrer">Telegram @JSKCDN999</a></div></div></div>
</div>
</div>
<div class="footer-record">
<div class="left-info">
<a href="../index.html" rel="nofollow"> Copyright@2017-2024 JSK cloud TECHNOLOGY PTE. LTD 版權所有 All Rights Reserved</a>
<a href="../index.html" rel="nofollow"> </a>
<span> </span>
</div>
<span> </span>
</div>
</div>
</div>
</footer><script src="../../assets/site.js" defer=""></script></body></html>