high8.8
CVE-2023-22523
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed.
Impact
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Assets Discovery Cloud | from 1.0.0 before 3.2.0 |
| Atlassian | Assets Discovery Data Center | from 1.0.0 through 3.1.11 from 6.0.0 before 6.2.0 |
| Atlassian | Assets Discovery Data Server | from 1.0.0 through 3.1.11 from 6.0.0 before 6.2.0 |
References
- NVD record
- CVE.org record
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
- https://jira.atlassian.com/browse/JSDSERVER-14925
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
- https://jira.atlassian.com/browse/JSDSERVER-14925