VULNERABILITY INTELLIGENCE

CVE-2023-22523

CVSS score8.8 HIGH

EPSS probability11.24%

CISA KEVNot currently listed

Published2023-12-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

security@atlassian.com — Vendor Advisory
security@atlassian.com — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory