Atlassian fixes critical Jira authentication bypass vulnerability

22-Apr-22

Atlassian has issued a security advisory warning that a serious authentication bypass vulnerability in Seraph, the company’s web application security framework, has been discovered in its Jira and Jira Service Management products.

The vulnerability is identified as CVE-2022-0540 and has a severity rating of 9.9. By sending a carefully crafted HTTP request to susceptible endpoints, a remote attacker can bypass authentication. Read More…