Skip to content
[CVE-2022-36802] Atlassian Jira Align, Version 10.107.4 Advisory
bishopfox.com | blog | CVE-2022-36802 | #cloud | #privilege-escalation | #ssrf | #atlassian | #security-advisory | #jira-align | #cve-2022-36802
Summary
Advisory on Atlassian Jira Align 10.107.4: an SSRF in Connector settings could leak the service account's AWS credentials, and a permission flaw let users elevate to Super Admin; fixed in 10.109.3.
- Published
- Collected