Select Page

Cybersecurity researchers on Wednesday disclosed critical flaws in the Atlassian project and software development platform that could be exploited to take over an account and control some of the apps connected through its single sign-on (SSO) capability.

“With just one click, an attacker could have used the flaws to get access to Atlassian’s publish Jira system and get sensitive information, such as security issues on Atlassian cloud, Bitbucket and on premise products,” Check Point Research said in an analysis shared with The Hacker News.

After the issues were reported to Atlassian on Jan. 8, 2021, the Australian company deployed a fix as part of its updates rolled out on May 18. The sub-domains affected by the flaws include –

  • jira.atlassian.com
  • confluence.atlassian.com
  • getsupport.atlassian.com
  • partners.atlassian.com
  • developer.atlassian.com
  • support.atlassian.com
  • training.atlassian.com

images from Hacker News