CVE-2021-43940

Description

Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center on Windows. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.155

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-26084,CVE-2021-43940 are affected in Atlassian Confluence 7.4.9	Windows
Vulnerabilities CVE-2021-26084,CVE-2021-39114,CVE-2021-43940 are affected in Atlassian Confluence 7.9.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234