(safe) Unsecure security

163 readers

1 users here now

(un) Security - Who will guard the guards?

founded 2 years ago

MODERATORS

[email protected]

Atlassian warns of critical Jira Service Management auth flaw (www.bleepingcomputer.com)

submitted 2 years ago by [email protected] to c/[email protected]

0 comments fedilink hide all child comments

Tracked as CVE-2023-22501, the vulnerability has a critical severity score of 9.4, as calculated by Atlassian. It could be used to target bot accounts in particular, due to their frequent interactions with other users and their increased likelihood to be included in Jira issues or requests or receiving emails with a "View Request" link - either condition being necessary for acquiring signup tokens.

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here