Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Alerts

Critical Vulnerability in Atlassian's Confluence Server and Confluence Data Center

27 August 2021

Atlassian has released security patches to address a critical vulnerability (CVE-2021-26084) in their Confluence Server and Data Center products.

Successful exploitation of this vulnerability may allow an authenticated attacker and in some cases, an unauthenticated attacker, to execute arbitrary code on affected instances.

The following versions are affected:

  • Versions before 6.13.23

  • Versions from 6.14.0 and before 7.4.11 (v7.4.11 is the patched version)

  • Versions from 7.5.0 and before 7.11.6 (v7.11.6 is the patched version)

  • Versions from 7.12.0 and before 7.12.5 (v7.12.5 is the patched version)

Administrators and users who are using affected versions of the products are advised to upgrade to the latest versions immediately.

Administrators and users who are unable to upgrade immediately can mitigate the issue by running scripts based on the operating systems that their products are hosted on. The scripts and more information about the vulnerability can be found in Atlassian's security advisory here: https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html

Back to top