SI IMPACT OFFLINE EDITOR UPDATE
SI IMPACT OFFLINE EDITOR SOFTWARE

'However, a review of the web logs showed that the file had barely been accessed. 'The file was a well-known copy of the JSP variant of the China Chopper webshell,' Volexity wrote. Security company Volexity, which reported the flaw to Atlassian, has published an analysis of the situation that suggests attackers are able to insert a Java Server Page (JSP) webshell into a publicly accessible web directory on Confluence servers.

SI IMPACT OFFLINE EDITOR UPDATE

The US Cybersecurity and Infrastructure Security Agency has issued an advisory in which it 'urges organizations with affected Atlassian's Confluence Server and Data Center products to block all internet traffic to and from those devices until an update is available and successfully applied.' News of the flaw, tracked as CVE-2022-26134, comes after Atlassian's cloud services experienced a two-week outage in April 2022. Users of Confluence 7.4 have more to worry about, as that version was released in April 2020, and it is 'potentially vulnerable,' according to Atlassian. Indeed, few may have been planning to adopt the new code, as version 7.19 is designated as a Long Term Support release.

While any critical-rated flaw that's under attack is very bad news, many Atlassian users may have dodged the bullet because version 7.18 of Confluence Server was announced on May 30 and is therefore unlikely to be widely deployed. No timeframe has been offered for delivery of a fix nor has Atlassian offered any hint about the complexity of work required to address the issue. Atlassian flags Bitbucket and Confluence Data Center flaws.At last, Atlassian sees an end to its outage.Atlassian comes clean on what data-deleting script behind outage actually did.Atlassian boasts strong Q3 revenue growth in wake of two-week outage.The second will definitely cause significant internal disruption. The first option is probably easier for most users to implement, though could cause significant disruption for remote workers unless there's some kind of VPN solution in place.

Disabling Confluence Server and Data Center instances.

Restricting Confluence Server and Data Center instances from the internet.

SI IMPACT OFFLINE EDITOR SOFTWARE

Atlassian suggests that while customers wait for the fix to land, they 'should work with their security team to consider the best course of action.' The Australian software house's 'options to consider' are:

Si impact offline editor