Main
Vulnerability Database
Exploits
ID:10115 - Exploit for Improper access control in Atlassian Companion App for MacOS - CVE-2023-22524
ID:10115 - Exploit for Improper access control in Atlassian Companion App for MacOS - CVE-2023-22524
Published: June 21, 2024
Vulnerability identifier: #VU83916
Vulnerability risk: High
CVE-ID: CVE-2023-22524
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
Atlassian Companion App for MacOS
Atlassian Companion App for MacOS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to improper access restrictions. A remote attacker can trick the victim to visit a specially crafted website and utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow the execution of code.
Remediation
Install updates from vendor's website.