Re:Zero-Day Exploitation of Atlassian Confluence
by tatersolid on Saturday June 04, 2022 @11:08AM
(#31621180)
Azure AD Application Proxy fits the bill for Microsoft 365 shops.
Nothing from Atlassian should ever be exposed to the public internet. Atlassian stuff is a security tire-fire with very old dependencies even in the latest releases, a painful reinstall/config merge needed for even minor patches, and no auto-update mechanism.
Nothing from Atlassian should ever be exposed to the public internet. Atlassian stuff is a security tire-fire with very old dependencies even in the latest releases, a painful reinstall/config merge needed for even minor patches, and no auto-update mechanism.