Atlassian urges customers to take ‘immediate action’ to protect against bug

Atlassian on Tuesday warned of a critical security flaw that could lead to “significant data loss” for customers, just weeks after state-backed hackers targeted its products. The company urged customers to patch against the flaw affecting on-premise versions of Atlassian Confluence Data Center and Server. The company said: “As part of our continuous security assessment processes, we have discovered that Confluence Data Center and Server customers are vulnerable to significant data loss if exploited by an unauthenticated attacker. There are no reports of active exploitation at this time; however, customers must take immediate action to protect their instances. Please read the Critical Security Advisory below for instructions and vulnerability details. Protecting customers’ instances is our top priority, and our prompt response demonstrates our dedication to ensuring the safety of our customers and your data. Atlassian is always reviewing security measures to reduce security risks and support our customers in taking timely action. Customers can expect to receive high-priority patches outside of our monthly advisory schedule as necessary. We believe that taking proactive action is the best approach and we appreciate your ongoing partnership.”