Lucene search
+L
AtlassianRecent

4567 matches found

Atlassian
Atlassian
•added 2006/03/27 1:09 a.m.•26 views

Don't send any notifications to disabled users

Once a user is disabled, they should not receive any notifications...

2.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2006/03/27 12:36 a.m.•31 views

Support nested groups

panel:title=Resolved in Confluence 3.5|borderStyle=solid|borderColor=3C78B5|titleBGColor=3C78B5|bgColor=E7F4FA We are pleased to advise that support for nested groups is available in Confluence 3.5. You can find instructions on how to configure nested groups in our documentation: Configuring User...

0.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2006/03/27 12:36 a.m.•37 views

Support nested groups

panel:title=Resolved in Confluence 3.5|borderStyle=solid|borderColor=3C78B5|titleBGColor=3C78B5|bgColor=E7F4FA We are pleased to advise that support for nested groups is available in Confluence 3.5. You can find instructions on how to configure nested groups in our documentation: Configuring User...

0.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/12/14 1:22 a.m.•27 views

Confluence is not using the seraph logout url to define how to log out.

We need to update our use of seraph to delegate the definition of the logout url to seraph-config.xml h2. Workaround for Confluence 5.7.2 and older Find and copy /confluence/WEB-INF/lib/confluence-x.x.x.jar to a temp location with "x.x.x" representing your Confluence version number Extract the...

0.9AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/12/14 1:22 a.m.•37 views

Confluence is not using the seraph logout url to define how to log out.

We need to update our use of seraph to delegate the definition of the logout url to seraph-config.xml h2. Workaround for Confluence 5.7.2 and older Find and copy /confluence/WEB-INF/lib/confluence-x.x.x.jar to a temp location with "x.x.x" representing your Confluence version number Extract the...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/12/14 1:22 a.m.•44 views

Confluence is not using the seraph logout url to define how to log out.

We need to update our use of seraph to delegate the definition of the logout url to seraph-config.xml h2. Workaround for Confluence 5.7.2 and older Find and copy /confluence/WEB-INF/lib/confluence-x.x.x.jar to a temp location with "x.x.x" representing your Confluence version number Extract the...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/11/03 3:17 a.m.•29 views

Project admin is presented with an option to select a Screen Scheme

The option of changing the scheme should only be given to the global admins...

1.4AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/11/03 3:17 a.m.•27 views

Project admin is presented with an option to select a Screen Scheme

The option of changing the scheme should only be given to the global admins...

1.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/11/03 3:17 a.m.•25 views

Project admin is presented with an option to select a Screen Scheme

The option of changing the scheme should only be given to the global admins...

1.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/10/01 5:56 p.m.•28 views

NPE in SpaceHelper borks page....

If you have a url for Space admin : http://server.name.com/spaces/listdecorators.action?key=BP2I And you get the space key wrong, then rather than failing gracefully, you end up with an sitemesh decoration of an empty page.... Looking at the code, you can see why: public String getSpaceName retur...

7AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/10/01 5:56 p.m.•28 views

NPE in SpaceHelper borks page....

If you have a url for Space admin : http://server.name.com/spaces/listdecorators.action?key=BP2I And you get the space key wrong, then rather than failing gracefully, you end up with an sitemesh decoration of an empty page.... Looking at the code, you can see why: public String getSpaceName retur...

7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/10/01 5:56 p.m.•36 views

NPE in SpaceHelper borks page....

If you have a url for Space admin : http://server.name.com/spaces/listdecorators.action?key=BP2I And you get the space key wrong, then rather than failing gracefully, you end up with an sitemesh decoration of an empty page.... Looking at the code, you can see why: public String getSpaceName retur...

7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/09/14 4:22 a.m.•29 views

A user cannot set the security level to none if the default security level is set

Selecting 'none' always creates an issue with the default security level...

1AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/09/14 4:22 a.m.•27 views

A user cannot set the security level to none if the default security level is set

Selecting 'none' always creates an issue with the default security level...

1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/09/14 4:22 a.m.•30 views

A user cannot set the security level to none if the default security level is set

Selecting 'none' always creates an issue with the default security level...

1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/06/24 6:21 a.m.•24 views

"Change password" facility modify only a password in a local database, not in LDAP.

If jira is configured to use Ldap authentification and user change its password, Jira checks current password in ldap, but modify password in local database only. I think, the correct behaviour is to change both passwords -- in ldap, because this is the one which is realy used, and in local...

1.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/06/24 6:21 a.m.•36 views

"Change password" facility modify only a password in a local database, not in LDAP.

If jira is configured to use Ldap authentification and user change its password, Jira checks current password in ldap, but modify password in local database only. I think, the correct behaviour is to change both passwords -- in ldap, because this is the one which is realy used, and in local...

1.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/05/04 4:22 a.m.•27 views

LDAP authentication falls back to database check when password is incorrect

If a user is present in LDAP, but the entered password is incorrect, JIRA ought to immediately fail to authenticate them. Instead in 3.2-beta it delegates to the database, and checks the password there...

1.8AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/05/04 4:22 a.m.•26 views

LDAP authentication falls back to database check when password is incorrect

If a user is present in LDAP, but the entered password is incorrect, JIRA ought to immediately fail to authenticate them. Instead in 3.2-beta it delegates to the database, and checks the password there...

1.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/05/04 4:22 a.m.•26 views

LDAP authentication falls back to database check when password is incorrect

If a user is present in LDAP, but the entered password is incorrect, JIRA ought to immediately fail to authenticate them. Instead in 3.2-beta it delegates to the database, and checks the password there...

1.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/02/10 3:49 p.m.•26 views

Logon with wrong user/password gives 'weird' errorpage.

Error screen after wrong login is 'weird'...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/02/10 3:49 p.m.•24 views

Logon with wrong user/password gives 'weird' errorpage.

Error screen after wrong login is 'weird'...

0.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/02/10 3:49 p.m.•33 views

Logon with wrong user/password gives 'weird' errorpage.

Error screen after wrong login is 'weird'...

0.9AI score
SaveExploits0
Atlassian
Atlassian
•added 2005/02/03 2:54 a.m.•26 views

Obscure email addresses in Confluence Mail

Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email address.and other ppl's too. Eeek! We really want to obscure them. And anywhere else they appear in confl... Maybe some funky javascript email encryption ?...

7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/02/03 2:54 a.m.•41 views

Obscure email addresses in Confluence Mail

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-2677. panel Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email...

7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2005/02/03 2:54 a.m.•33 views

Obscure email addresses in Confluence Mail

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-2677. panel Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email...

7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/12/01 11:15 p.m.•23 views

Manage authentication for NTLM proxies

We want to access RRS content internally, but we are using a secured proxy requiring authentication via NTLM or user/password. We setted up the standard Java proxies properties: http.proxyHost, http.proxyPort and http.auth.ntlm.domain. But it seams that the http.auth.ntlm.domain properties does n...

0.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/12/01 11:15 p.m.•38 views

Manage authentication for NTLM proxies

We want to access RRS content internally, but we are using a secured proxy requiring authentication via NTLM or user/password. We setted up the standard Java proxies properties: http.proxyHost, http.proxyPort and http.auth.ntlm.domain. But it seams that the http.auth.ntlm.domain properties does n...

0.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/14 11:03 p.m.•24 views

Encrypt all passwords stored on the file system

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-2146. panel Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/14 11:03 p.m.•28 views

Encrypt all passwords stored on the file system

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-2146. panel Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/14 11:03 p.m.•34 views

Encrypt all passwords stored on the file system

Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an encryption scheme for anything requiring security stored on the file system...

1.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•26 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•25 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/11/08 2:58 p.m.•31 views

A page containing the rss-macro is not displayed if the requested rss-feed is "down"

A page containing the rss-feed macro is not shown if the requested rss-feed is "down" there's no response sent to the browser. It would certainly be better if the page could be displayed anyway; perhaps with a message stating that the feed contents can't be fetched...

0.7AI score
SaveExploits0
Atlassian
Atlassian
•added 2004/09/17 9:37 a.m.•24 views

MoveIssue does not keep the security issue level after the move.

MoveIssue does not keep the security issue level after the move...

1.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/09/17 9:37 a.m.•33 views

MoveIssue does not keep the security issue level after the move.

MoveIssue does not keep the security issue level after the move...

1.3AI score
SaveExploits0
Atlassian
Atlassian
•added 2004/09/17 9:37 a.m.•30 views

MoveIssue does not keep the security issue level after the move.

MoveIssue does not keep the security issue level after the move...

1.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/08/25 6:33 a.m.•28 views

Enhance Seraph SSO support to create users automatically

Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator could create an OSUser account in JIRA if the SSO authentication succeeds...

2.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/08/25 6:33 a.m.•22 views

Enhance Seraph SSO support to create users automatically

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...

2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/08/25 6:33 a.m.•28 views

Enhance Seraph SSO support to create users automatically

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-4299. panel Users of SSO systems generally also have some sort of external user management. As a simple first step, JIRA's SSO authenticator...

2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/06/29 10:11 p.m.•27 views

Spam-protection

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-1469. panel We need something like MT-Blacklist: the ability to define URL patterns that flag a page and/or comment as spam. It...

0.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/06/29 10:11 p.m.•50 views

Spam-protection

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-1469. panel We need something like MT-Blacklist: the ability to define URL patterns that flag a page and/or comment as spam. It...

0.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/06/29 10:11 p.m.•30 views

Spam-protection

We need something like MT-Blacklist: the ability to define URL patterns that flag a page and/or comment as spam. It shouldn't be too hard to do - we already track URL links. The UI will need some thought though what do you do if you define a URL as spam, and it's in a page? Revert the page back t...

0.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/04/01 11:52 a.m.•24 views

Character not allowed in user name

A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...

1.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/04/01 11:52 a.m.•29 views

Character not allowed in user name

A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...

1.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/04/01 11:52 a.m.•29 views

Character not allowed in user name

A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...

1.7AI score
SaveExploits0
Atlassian
Atlassian
•added 2004/02/20 2:47 a.m.•22 views

When deleting an Issue Security Level issues need to be re-indexed

Create 1 security levels Put some issues into it Delete the level hence removing any security level from the issues You will not be able to find the issues any more - need to re-index...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/02/20 2:47 a.m.•36 views

When deleting an Issue Security Level issues need to be re-indexed

Create 1 security levels Put some issues into it Delete the level hence removing any security level from the issues You will not be able to find the issues any more - need to re-index...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2004/02/20 2:47 a.m.•26 views

When deleting an Issue Security Level issues need to be re-indexed

Create 1 security levels Put some issues into it Delete the level hence removing any security level from the issues You will not be able to find the issues any more - need to re-index...

1.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2004/02/14 4:19 a.m.•28 views

Applet certificate is not trusted.

You need to get a proper certificate for the applet - or else there will be some disquiet amongst some corporate users - and their IT Security overlords...

2AI score
SaveExploits0
Total number of security vulnerabilities4567