CVE-2023-34063: Critical severity atlassian confluence server/data center vulnerability

Published Jan 16, 2024

Updated

Aria Automation contains a Missing Access Control vulnerability.

An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.

Affected Software

17 affected components

Atlassian Confluence Data Center=8

Atlassian Confluence Server=8

Atlassian Jira Software Data Center=8.20.0

Atlassian Jira Software Data Center=9.4.0

Atlassian Jira Software Data Center=9.5.0

Atlassian Jira Software Data Center=9.6.0

VMware Aria Automation=8.16

VMware Aria Automation=8.11.2

VMware Aria Automation=8.12.0

VMware Aria Automation=8.12.1

VMware Aria Automation=8.12.2

VMware Aria Automation=8.13.0

VMware Aria Automation=8.13.1

VMware Aria Automation=8.14.0

VMware Aria Automation=8.14.1

VMware Cloud Foundation=4.0

VMware Cloud Foundation=5.0

Remediation

Patch Available

https://www.vmware.com/security/advisories/VMSA-2024-0001.html

Event History

Jan 16, 2024

CVE Published

via MITRE·09:10 AM

Data Sourced

via MITRE·09:10 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

News Published

via The Register·06:09 PM

Jan 20, 2024

News Published

via The Register·06:13 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2023-34063?

CVE-2023-34063 has a high severity rating due to its exploitation potential leading to unauthorized access.

How do I fix CVE-2023-34063?

To fix CVE-2023-34063, apply the latest security patches provided by VMware and Atlassian for affected software products.

What software products are affected by CVE-2023-34063?

CVE-2023-34063 affects products such as VMware Aria Automation and certain versions of Atlassian Confluence and Jira Software Data Center.

Who can exploit CVE-2023-34063?

An authenticated malicious actor can exploit CVE-2023-34063 to gain unauthorized access.

What does the vulnerability CVE-2023-34063 entail?

CVE-2023-34063 involves a Missing Access Control vulnerability, allowing unauthorized access to remote organizations and workflows.