GobyVuls/CVE-2022-26138.md

Atlassian Confluence Default Login (CVE-2022-26138)

Vulnerability	Atlassian Confluence Default Login (CVE-2022-26138)
Chinese name	Atlassian Confluence 硬编码用户登陆漏洞 (CVE-2022-26138)
CVSS core	7.0
FOFA Query (click to view the results directly)	(header="X-Confluence-" && header!="TP-LINK Router UPnP") || (banner="X-Confluence-" && banner!="TP-LINK Router UPnP") || (body="name="confluence-base-url"" && body="id="com-atlassian-confluence") || title="Atlassian Confluence" || (title=="Errors" && body="Confluence")
Number of assets affected	90658
Description	Atlassian Confluence Server is a server version of Atlassian's collaboration software with enterprise knowledge management functions and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server, which stems from the use of hard-coded passwords that allow attackers to log in to view sensitive information such as team space members.
Impact	A security vulnerability exists in Atlassian Confluence Server, which stems from the use of hard-coded passwords that allow attackers to log in to view sensitive information such as team space members.