[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftfeg2eX-YvMaOxuShf4nMNNVgnPeD3UMMIgbGI6QD3M":3,"g5a-risk:CVE-2022-36803":100},{"success":4,"data":5,"meta":97},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":42,"weaknesses":50,"weaknessesCount":42,"isActivelyExploited":59,"cisaInfo":26,"otxData":26,"relatedBlogPosts":60,"seoMetadata":61,"configurations":86,"relatedVendorCves":95,"notableEvents":96},"CVE-2022-36803","What is CVE-2022-36803?","The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox.","The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the Mas...","2022-10-14T04:15:13.807","2024-10-02T15:35:01.363",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.0067,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"atlassian","jira_align","*","cpe:2.3:a:atlassian:jira_align:*:*:*:*:*:*:*:*",1,[44],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FJIRAALIGN-4281","Atlassian",[48,49],"Permissions Required","Vendor Advisory",[51],{"id":52,"name":53,"description":54,"extendedDescription":55,"status":56,"abstraction":57,"structure":58},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":62,"metaDescription":63,"keywords":64,"canonicalUrl":65,"structuredData":66},"What is CVE-2022-36803? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36803, a high severity cyber security vulnerability from 2022. The MasterUserEdit API in Atlassian Jira Align Server befor...","CVE-2022-36803, CVE-2022-36803 vulnerability, CVE-2022-36803 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, atlassian security, jira_align vulnerability","\u002Fwhat-is\u002Fcve-2022-36803",{"@context":67,"@type":68,"headline":62,"description":63,"datePublished":10,"dateModified":11,"author":69,"publisher":73,"about":77,"mainEntityOfPage":81,"articleSection":84,"keywords":85},"https:\u002F\u002Fschema.org","TechArticle",{"@type":70,"name":71,"url":72},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":70,"name":71,"url":72,"logo":74},{"@type":75,"url":76},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":78,"name":6,"description":79,"additionalType":80},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":82,"@id":83},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36803","Cybersecurity","CVE-2022-36803, CVE-2022-36803 vulnerability, CVE-2022-36803 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[87],{"Operator":26,"Negate":26,"Nodes":88},[89],{"Operator":90,"Negate":26,"CPEMatch":91},"OR",[92],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":93,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":94,"VersionEndIncluding":26},"E6AD57B7-5D67-467B-8366-78F6973D85B0","10.109.2",[],[],{"lastModified":11,"cacheTime":98,"version":99},1792384597257,"2.0",{"score":101,"band":102,"action":103,"scoredAt":104},47,"Medium","Plan remediation","2026-10-16T06:55:59.014825+00:00"]