Description
Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Questions For Confluence | Atlassian / Questions For Confluence | 2.7.34 | affected |
| Questions For Confluence | Atlassian / Questions For Confluence | 2.7.35 | affected |
| Questions For Confluence | Atlassian / Questions For Confluence | 3.0.2 | affected |