Atlassian, an Australian software company known for tools like Jira and Trello, has issued an alert that the company’s Jira products are affected by an authentication bypass vulnerability through Seraph, Atlassian’s web application for security. Identified as CVE-2022-0540, this vulnerability allows remote attackers to bypass authentication through Seraph through a crafted HTTP request to specific vulnerable endpoints. Atlassian has stated that affected products include their Jira Core Server, Data Center, Software Server, and Management Data Center. However, this vulnerability does not affect the cloud versions of Jira products. Exploiting this vulnerability requires Seraph to have specific configurations, including apps that “specify ‘roles required’ under the ‘webwork1’ action namespace level and do not specific it at an ‘action’ level.” Apps that have been identified as being vulnerable to this CVE are listed in the Atlassian advisory linked below. Atlassian has released security updates for Jira Core Server, Software Server, and Software Data Center versions 8.22.0 and later, and for Jira Service Management version 4.22.0 and later. CTIX analysts will continue to monitor this situation and provide updates accordingly.