中危 Jira Data Center and Server Mobile Plugin 授权SSRF漏洞（CVE-2022-26135）
CVE编号
CVE-2022-26135利用情况
POC 已公开补丁情况
官方补丁披露时间
2022-07-06漏洞描述
Atlassian Jira 多款产品 Mobile Plugin中存在服务端请求伪造漏洞(SSRF)，经过身份验证的远程攻击者可通过向Jira Core REST API发送特制请求，从而伪造服务端发起请求，从而导致敏感信息泄露，同时为下一步攻击利用提供条件。需注意的是，若服务端开启注册功能，则未授权用户可通过注册获取权限进而利用。 影响版本： 针对 Jira Core Server, Jira Software Server, and Jira Software Data Center: Versions after 8.0 and before 8.13.22 8.14.x 8.15.x 8.16.x 8.17.x 8.18.x 8.19.x 8.20.x before 8.20.10 8.21.x 8.22.x before 8.22.4 针对 Jira Service Management Server and Data Center: Versions after 4.0 and before 4.13.22 4.14.x 4.15.x 4.16.x 4.17.x 4.18.x 4.19.x 4.20.x before 4.20.10 4.21.x 4.22.x before 4.22.4 安全版本： 针对 Jira Core Server, Jira Software Server, and Jira Software Data Center: 8.13.x >= 8.13.22 8.20.x >= 8.20.10 8.22.x >= 8.22.4 9.0.0 针对Jira Service Management Server and Data Center: 4.13.x >= 4.13.22 4.20.x >= 4.20.10 4.22.x >= 4.22.4 5.0.0解决建议
1、关闭前台注册功能。2、升级至安全版本。受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_data_center | * | From (including) 8.0.0 | Up to (excluding) 8.13.22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_data_center | * | From (including) 8.14.0 | Up to (excluding) 8.20.10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_data_center | * | From (including) 8.21.0 | Up to (excluding) 8.22.4 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_server | * | From (including) 8.0.0 | Up to (excluding) 8.13.22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_server | * | From (including) 8.14.0 | Up to (excluding) 8.20.10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_server | * | From (including) 8.21.0 | Up to (excluding) 8.22.4 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_service_management | * | From (including) 4.0.0 | Up to (excluding) 4.13.22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_service_management | * | From (including) 4.14.0 | Up to (excluding) 4.20.10 | ||||
| 运行在以下环境 | |||||||||
| 应用 | atlassian | jira_service_management | * | From (including) 4.21.0 | Up to (excluding) 4.22.4 | ||||
- 攻击路径 远程
- 攻击复杂度 容易
- 权限要求 普通权限
- 影响范围 有限影响
- EXP成熟度 POC 已公开
- 补丁情况 官方补丁
- 数据保密性 数据泄露
- 数据完整性 传输被破坏
- 服务器危害 无影响
- 全网数量 N/A
| CWE-ID | 漏洞类型 |
| CWE-918 | 服务端请求伪造（SSRF） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论