4 ms·
Atlassian Hardcoded a Password
- verall 4y agoUser: disabledsystemuser Username: disabledsystemuser Email: dontdeletethisuser@email.com Wow pretty bad. If I was an administrator I would definitely think this account wouldn't actually work for logging in.
- taspeotis 4y agoDon’t forget Password: disabled1system1user6708 And that the email domain is not controlled by Atlassian.
- lgats 4y agoit appears someone recently registered the email https://twitter.com/4chr4f2/status/1550090004151640066?s=21&t=lGEcOUKV5c53K0zABzi4Kg https://twitter.com/4chr4f2/status/1550090004151640066?s=21&...
- pharos92 4y agoWhy does it feel like every second week there's some critical Atlassian vulnerability being disclosed...
- funcDropShadow 4y agoBecause Atlassian is the new Cisco
- scottydelta 4y agoFrom my experience, most of the times these kind of vulnerabilities stem from companies taking shortcuts to enable easy on-boarding of customers on their systems.