Mitigation solution for CVE-2021-26084

[Kaz Shinohara]

A security advisory email was sent to me and it suggest us to upgrade the Confluence to version 7.13.0 for a scurity vulnerbility in Confluence Server that is mentioned in this page, Concluence security vulnerbility 

We use Confluence version 7.5.1 on one of our servers and its SQL is MS Server. However, according to Confluence Server version 7.13 supported platforms , Our current MS SQL version appears to be not supported for the ver 7.13.0 and arranging a new infrastructure may take some time. 

Because of this, I am unable to upgrade the Confluence soon and I wonder if a mitigation solution with cve-2021-26084-update.ps1 suggested in the Concluence security vulnerbility page can be run with the current infrastructure for Confluence and Confulence would be running with no issue after the solution method is performed. 

Does the mitigation solution with running cve-2021-26084-update.ps1 require an upgrade with our infrastructure or can this be run without infrastructure upgrade?

It would be great if information or advice regarding this matter is given to us.

[Benjamin · Accepted solution]

HI @Kaz Shinohara ,

The workaround is there in case you are not able to upgrade at this time or in the short term. So, this at least gets you there until an upgrade can be arrange at some point in time.

Thanks,

Ben

[Kaz Shinohara]

Thank you for your advice, Benjamin.

I will then look into performing the mitigation solution them.

Kind regards,

Kaz

[Benjamin]

You are most welcome.