CVE-2023-22523
Estado: ModificadaAlta (8.8)—
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 11%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- NVD-CWE-noinfo
Referencias
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
- https://jira.atlassian.com/browse/JSDSERVER-14925
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
- https://jira.atlassian.com/browse/JSDSERVER-14925
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-22523",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-22523",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2023-12-14T05:00:08.551203Z"
}
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "security@atlassian.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "security@atlassian.com",
"affectedData": [
{
"vendor": "Atlassian",
"product": "Assets Discovery Cloud",
"versions": [
{
"status": "unaffected",
"version": "< 1.0.0"
},
{
"status": "affected",
"version": ">= 1.0.0"
},
{
"status": "affected",
"version": ">= 1.5.7.0"
},
{
"status": "affected",
"version": ">= 1.5.7.1"
},
{
"status": "affected",
"version": ">= 1.5.7.3"
},
{
"status": "affected",
"version": ">= 1.5.7.4"
},
{
"status": "affected",
"version": ">= 1.6.1.2"
},
{
"status": "affected",
"version": ">= 1.6.2.0"
},
{
"status": "affected",
"version": ">= 1.6.3.0"
},
{
"status": "affected",
"version": ">= 1.6.4.0"
},
{
"status": "affected",
"version": ">= 1.6.4.4"
},
{
"status": "affected",
"version": ">= 1.7.0.0"
},
{
"status": "affected",
"version": ">= 1.7.1.0"
},
{
"status": "affected",
"version": ">= 1.7.2.0"
},
{
"status": "affected",
"version": ">= 1.8.0.0"
},
{
"status": "affected",
"version": ">= 1.8.1.1"
},
{
"status": "affected",
"version": ">= 1.8.1.2"
},
{
"status": "affected",
"version": ">= 1.8.1.3"
},
{
"status": "affected",
"version": ">= 1.8.1.4"
},
{
"status": "affected",
"version": ">= 1.8.1.5"
},
{
"status": "affected",
"version": ">= 1.8.2.0"
},
{
"status": "affected",
"version": ">= 2.0.0.0"
},
{
"status": "affected",
"version": ">= 3.1.0"
},
{
"status": "affected",
"version": ">= 3.1.1"
},
{
"status": "affected",
"version": ">= 3.1.10"
},
{
"status": "affected",
"version": ">= 3.1.11"
},
{
"status": "affected",
"version": ">= 3.1.2"
},
{
"status": "affected",
"version": ">= 3.1.3"
},
{
"status": "affected",
"version": ">= 3.1.4"
},
{
"status": "affected",
"version": ">= 3.1.5"
},
{
"status": "affected",
"version": ">= 3.1.6"
},
{
"status": "affected",
"version": ">= 3.1.7"
},
{
"status": "affected",
"version": ">= 3.1.8"
},
{
"status": "affected",
"version": ">= 3.1.9"
},
{
"status": "unaffected",
"version": ">= 3.2.0"
}
]
},
{
"vendor": "Atlassian",
"product": "Assets Discovery Data Center",
"versions": [
{
"status": "unaffected",
"version": "< 1.0.0"
},
{
"status": "affected",
"version": ">= 1.0.0"
},
{
"status": "affected",
"version": ">= 3.1.0"
},
{
"status": "affected",
"version": ">= 3.1.1"
},
{
"status": "affected",
"version": ">= 3.1.10"
},
{
"status": "affected",
"version": ">= 3.1.11"
},
{
"status": "affected",
"version": ">= 3.1.2"
},
{
"status": "affected",
"version": ">= 3.1.3"
},
{
"status": "affected",
"version": ">= 3.1.4"
},
{
"status": "affected",
"version": ">= 3.1.5"
},
{
"status": "affected",
"version": ">= 3.1.6"
},
{
"status": "affected",
"version": ">= 3.1.7"
},
{
"status": "affected",
"version": ">= 3.1.9"
},
{
"status": "affected",
"version": ">= 6.0.0"
},
{
"status": "affected",
"version": ">= 6.1.10"
},
{
"status": "affected",
"version": ">= 6.1.11"
},
{
"status": "affected",
"version": ">= 6.1.12"
},
{
"status": "affected",
"version": ">= 6.1.13"
},
{
"status": "affected",
"version": ">= 6.1.14"
},
{
"status": "affected",
"version": ">= 6.1.9"
},
{
"status": "unaffected",
"version": ">= 6.2.0"
}
]
}
]
}
],
"published": "2023-12-06T05:15:10.087",
"references": [
{
"url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html",
"tags": [
"Vendor Advisory"
],
"source": "security@atlassian.com"
},
{
"url": "https://jira.atlassian.com/browse/JSDSERVER-14925",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"source": "security@atlassian.com"
},
{
"url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://jira.atlassian.com/browse/JSDSERVER-14925",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent."
},
{
"lang": "es",
"value": "Esta vulnerabilidad, si se explota, permite a un atacante realizar RCE (ejecución remota de código) privilegiada en máquinas con el agente Assets Discovery instalado. La vulnerabilidad existe entre la aplicación Assets Discovery (anteriormente conocida como Insight Discovery) y el agente Assets Discovery."
}
],
"lastModified": "2026-06-17T05:35:37.967",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:atlassian:assets_discovery_cloud:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B605B443-2604-4D2D-99C2-EF7D955B1886",
"versionEndExcluding": "3.2.0",
"versionStartIncluding": "1.0.0"
},
{
"criteria": "cpe:2.3:a:atlassian:assets_discovery_data_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EE9C216-E2F8-4BDB-A67B-095AA0B19613",
"versionEndIncluding": "3.1.11",
"versionStartIncluding": "1.0.0"
},
{
"criteria": "cpe:2.3:a:atlassian:assets_discovery_data_center:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C95EF896-3AE4-400B-B4BD-61D909D91B5B",
"versionEndExcluding": "6.2.0",
"versionStartIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:a:atlassian:assets_discovery_data_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63079045-C71C-4D37-9B05-BD3705B90B37",
"versionEndIncluding": "3.1.11",
"versionStartIncluding": "1.0.0"
},
{
"criteria": "cpe:2.3:a:atlassian:assets_discovery_data_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "329E8EB1-FEAC-4C29-B443-4AB31D5DBC95",
"versionEndExcluding": "6.2.0",
"versionStartIncluding": "6.0.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@atlassian.com"
}