Atlassian zero-day dumped on Twitter

Pawda [Memoria]
4 years ago

1

The SwiftOnSecurity Twitter account revealed that Atlassian provided a domain that resolved to a local server with a common SSL certificate for its Confluence cloud service, to enable the Atlassian Companion app to edit files in a preferred local application and save the files back to Confluence.

Link to the tweet:
https://twitter.com/SwiftOnSecurity/status/1202034106495832067?s=20
Link to the article:
https://www.theregister.co.uk/2019/12/05/atlassian_zero_day_bug/

1reply

2voices

330views

Darwin [DIDIx13]
4 years ago

0

Accidentally dropped a 0day on Twitter. Damn I think he is sad that he is not gaining any money out of it.

That would have been a nice CVE :)

Message me anytime!

You must be logged in to reply to this discussion. Login