topic Re: Confluence Server and Data Center - CVE-2022-26134 in Cortex XDR Discussions

Confluence Server and Data Center - CVE-2022-26134

ckopta — Fri, 03 Jun 2022 16:38:31 GMT

Wondering where Cortex is at with this Critical vuln from Atlassian? We are actively moving forward with mitigations, but would like Cortex to be able to take action as well if needed.

Confluence Security Advisory 2022-06-02 | Confluence Data Center and Server 7.18 | Atlassian Documentation

Re: Confluence Server and Data Center - CVE-2022-26134

JimWaZ — Fri, 03 Jun 2022 21:48:00 GMT

Agreed.

Re: Confluence Server and Data Center - CVE-2022-26134

afurze — Mon, 06 Jun 2022 15:03:31 GMT

Hi Ckopta,

The best path forward for this is to open a TAC case to obtain coverage information for this CVE. You can open a case in your Customer Support Portal (https://support.paloaltonetworks.com) and submit the CVE info you have and ask for a determination of what coverage is available.

Re: Confluence Server and Data Center - CVE-2022-26134

hisingh — Mon, 06 Jun 2022 15:45:37 GMT

Hello @ckopta

The App threat version 8577 has released the coverage for CVE-2022-26134

92632

Atlassian Confluence Remote Code Execution Vulnerability

CVE-2022-26134

I hope that helps.

Himani