CVE-2023-22523

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@atlassian.com

Published

2023-12-06

Last modified

2026-02-25

Affected products

• Assets Discovery Cloud (Atlassian)
• Assets Discovery Data Center (Atlassian)
• Assets Discovery Data Server (Atlassian)

References

• https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
• https://jira.atlassian.com/browse/JSDSERVER-14925