News for hackers. Stuff that matters.
Re:Zero-Day Exploitation of Atlassian Confluence by tyingq on Friday June 03, 2022 @07:42AM (#31606998)
>No one sane runs confluence as root.

See "Figure 1. Process tree in Volexity Volcano Server from the infected Confluence server"

https://www.volexity.com/wp-content/uploads/2022/06/Figure1....

I didn't mean running as non-root would fix the problem, just that a remote root RCE was worse than a normal RCE.

There are no comments on this comment yet.