Description
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Assets Discovery Cloud | >= 1.0.0, >= 1.5.7.0, >= 1.5.7.1, >= 1.5.7.3, >= 1.5.7.4, >= 1.6.1.2, >= 1.6.2.0, >= 1.6.3.0, >= 1.6.4.0, >= 1.6.4.4, >= 1.7.0.0, >= 1.7.1.0, >= 1.7.2.0, >= 1.8.0.0, >= 1.8.1.1, >= 1.8.1.2, >= 1.8.1.3, >= 1.8.1.4, >= 1.8.1.5, >= 1.8.2.0, >= 2.0.0.0, >= 3.1.0, >= 3.1.1, >= 3.1.10, >= 3.1.11, >= 3.1.… | < 1.0.0 |
| Atlassian | Assets Discovery Data Center | >= 1.0.0, >= 3.1.0, >= 3.1.1, >= 3.1.10, >= 3.1.11, >= 3.1.2, >= 3.1.3, >= 3.1.4, >= 3.1.5, >= 3.1.6, >= 3.1.7, >= 3.1.9, >= 6.0.0, >= 6.1.10, >= 6.1.11, >= 6.1.12, >= 6.1.13, >= 6.1.14, >= 6.1.9 | < 1.0.0 |
Advisories 3
- WID-SEC-2026-2923 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- WID-SEC-2026-1608 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 19, 2026
- WID-SEC-2023-3063 Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 17, 2023