PT-2024-33287 · Atlassian+1 · Confluence+3

Christian Flaßkamp · Published 2024-10-09 · Updated 2024-10-11 · CVE-2024-48941

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket versions 3.1.4.5 and earlier

Description The issue allows remote attackers to bypass 2-factor authentication by interacting with the "/rest" endpoint of Jira, Confluence, or Bitbucket. In the default configuration, "/rest" is allowlisted.

Recommendations For versions 3.1.4.5 and earlier, consider restricting access to the "/rest" endpoint as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-48941

Affected Products

Bitbucket

Confluence

Jira

Syracom Secure Login

References · 7

• https://osv.dev/vulnerability/CVE-2024-48941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48941 · Security Note
• https://syracom-bee.atlassian.net/wiki/spaces/SL/pages/3236560898/2024-09-16+-+Secure+Login+security+advisory+-+Insecure+default+configuration · Vendor Advisory
• https://t.me/cvedetector/7538 · Telegram Post
• https://t.me/cvenotify/97896 · Telegram Post
• https://twitter.com/CVEnew/status/1844160553075224985 · Twitter Post
• https://t.me/cvenotify/97701 · Telegram Post