Jira Align Vulnerabilities Exposed Atlassian Infrastructure to Attacks


Researchers with Bishop Fox warn that Jira Align flaws that have just been fixed might give an attacker access to Atlassian infrastructure as well as the ability to raise privileges, gain cloud login credentials, and steal data.

In contrast to Jira, which links teams to one another, Jira Align is an enterprise software-as-a-service (SaaS) that aids software businesses in connecting teams to the company. Identified as CVE-2022-36802 and CVE-2022-36803, respectively, both flaws might be remotely exploited. Read More…