CVE-2023-22523

Published: Dec 6, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

Affected (5)

Products: Atlassian: Assets Discovery Cloud, Assets Discovery Data Center, Assets Discovery Data Server

Atlassian

3 products

Assets Discovery Cloud

Assets Discovery Data Center

Assets Discovery Data Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Atlassian Assets Discovery Cloud	From 1.0.0 to 3.2.0
Atlassian Assets Discovery Data Center	From 1.0.0 to 3.1.11
Atlassian Assets Discovery Data Center	From 6.0.0 to 6.2.0
Atlassian Assets Discovery Data Server	From 1.0.0 to 3.1.11
Atlassian Assets Discovery Data Server	From 6.0.0 to 6.2.0

References (4)

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html

Source: security@atlassian.com

Vendor Advisory

https://jira.atlassian.com/browse/JSDSERVER-14925

Source: security@atlassian.com

Issue TrackingVendor Advisory

https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://jira.atlassian.com/browse/JSDSERVER-14925

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.