Does CVE-2022-0540 impact old JIRA server?

[Anne Lee]

Hi, our JIRA server version is very old (6.1.6 & 6.4.2), how to check CVE-2022-0540 has impact or not?

Thanks!

[Ollie Guan · Accepted solution]

Hi @Anne Lee ,

Affected All Jira versions before 8.13.18, this includes the following products:

• Jira Core Server
• Jira Software Server
• Jira Software Data Center

https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html

[Anne Lee]

Hi Ollie,

Does JIRA Server 6.4 is consider  Jira Core Server series?

The plugin name seem different.

[Ollie Guan]

Jira Software 6.4

https://confluence.atlassian.com/jira064/jira-6-4-release-notes-720414168.html

[Anne Lee]

Hi Ollie,

Does "JIRA Mobile" is the same as "Mobile Plugin for Jira"? Since we cannot upgrade JIRA server to least version, We need use other workaround solution.

[Ollie Guan]

Hi @Anne Lee ,

From the release notes, Mobile Plugin for Jira is only enabled after Jira Server 8.0.0

https://marketplace.atlassian.com/apps/1220151/mobile-plugin-for-jira-data-center-and-server/version-history

[serkan_sezer]

hi, we are using version 8.20.1. Would disabling the Mobile Add-on for jira fix this issue?

thank you