CVEvulnerability

CVE-2021-43940

7.8 HIGH Published 2022-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-427

Description

Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center on Windows. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

Affected configurations

• atlassian confluence data center (< 7.4.10) • atlassian confluence data center (>= 7.5.0 < 7.12.3) • atlassian confluence server (< 7.4.10) • atlassian confluence server (>= 7.5.0 < 7.12.3)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References