Atlassian Confluence - Authentication Bypass (CVE-2022-26138)

Atlassian Confluence server is affected by an Authentication Bypass vulnerability, located in the Questions for Confluence application that is installed on the target server. The root cause of this vulnerability is the adding of an user, disabledsystemuser, by the installer process of Questions for Confluence which comes with the following hard-coded password: disabled1system1user6708. An attacker can exploit this vulnerability to log into Confluence in order to access confidential data and resources based on the permissions granted to disabledsystemuser.

The risk exists that a remote unauthenticated attacker could exploit this vulnerability and steal sensitive information.

Applying the latest Atlassian patch for the Questions for Confluence application, will fix this vulnerability.

https://confluence.atlassian.com/doc/confluence-security-advisory-2022-07-20-1142446709.html