---
id: 3991
title: "[CVE-2022-36802] Atlassian Jira Align, Version 10.107.4 Advisory"
cve: CVE-2022-36802
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/jira-align-advisory"
published_at: "2022-10-24T00:00:00Z"
tags: ["cloud", "privilege-escalation", "ssrf", "atlassian", "security-advisory", "jira-align", "cve-2022-36802"]
phying_url: "https://phying.com/item/3991"
lang: en
---

# [CVE-2022-36802] Atlassian Jira Align, Version 10.107.4 Advisory

## Summary

Advisory on Atlassian Jira Align 10.107.4: an SSRF in Connector settings could leak the service account's AWS credentials, and a permission flaw let users elevate to Super Admin; fixed in 10.109.3.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2022-36802
- **Published:** 2022-10-24T00:00:00Z
- **Original:** https://bishopfox.com/blog/jira-align-advisory
- **Phying News:** https://phying.com/item/3991