.. / CVE-2022-26138

• Auth Bypass
• Nuclei
• Web

Exploit for Atlassian Questions For Confluence - Hardcoded Credentials (CVE-2022-26138)

Description:

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password can exploit this vulnerability to log into Confluence and access all content accessible to users in the confluence-users group.

Nuclei Template

View the template here CVE-2022-26138.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-26138.yaml

References: