CVE-2021-43940CWE-427

Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a…

High · published February 15, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center on Windows. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-02-15T03:15Z
EPSS history
Timeline
  • 15 FEB 03:15Z
    Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a…
    cvelistv5