VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 14, 2022· Updated Jun 17, 2026

CVE-2022-36803

CVE-2022-36803

Description

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Atlassian/Jira Align2 versions
    cpe:2.3:a:atlassian:jira_align:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_align:*:*:*:*:*:*:*:*range: <10.109.2
    • (no CPE)range: unspecified
  • Atlassian/Jira Serverllm-fuzzy
    Range: <10.109.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.