High Severity Injection Vulnerability Affects Assets Discovery 1.0 - 6.2.0 (All Versions)

CVE-2024-21682

Summary

A significant injection vulnerability has been identified in the Assets Discovery tool from Atlassian, affecting all versions from 1.0 to 6.2.0. This vulnerability allows an authenticated attacker to alter system calls, potentially compromising the integrity, confidentiality, and availability of the system without user interaction. Assets Discovery is a crucial network scanning tool utilized with Jira Service Management, which aids in identifying and managing hardware and software within a local network. To mitigate risks associated with this vulnerability, Atlassian advises customers to upgrade to the latest version of Assets Discovery. Information about supported fixed versions and the upgrade procedure can be found in the release notes and the Atlassian Marketplace.

References