Unrated severityNVD Advisory· Published Oct 14, 2022· Updated Oct 2, 2024

CVE-2022-36803

Description

The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira Serverllm-fuzzy
Range: <10.109.2
Atlassian/Jira Aligncpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

jira.atlassian.com/browse/JIRAALIGN-4281mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000