Can I admininstratively clear all cookies?

[Matt Ray]

We're looking at mitigating the recent security issue found with Atlassian products and a MITM attack.  Suggestion from CloudSek say to administratively limit the amount of time a cookie can last, but if I just wanted to administratively wipe all cookies, as a precaution, is there a way to do this from any of the Software Apps?  

[Brant Schroeder · Accepted solution]

@Matt Ray Welcome to the Atlassian community

There is nothing in the Atlassian applications that would allow you to force the clearing of browser cookies associated with the application after a specific period.  

[Matt Ray]

Thanks, @Brant Schroeder . 

[Nic Brough -Adaptavist-]

You might want to skim through https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-response-to-claims-regarding-session-tokens-cookies/ba-p/2217925 as well.

[Matt Ray]

Yes, I read this earlier today.   We heard of the vulnerability on the 14th and did all our research based on CloudTek's article.  Because the article you sent wasn't released until yesterday, we didn't have it when we were digging for information on the 14th, but it is comforting to know it is not the issue we thought it was.    Thanks, @Nic Brough -Adaptavist- 

[Nic Brough -Adaptavist-]

It's always worth following up!  :-)

[Matt Ray]

Well, just because Atlassian says it's not as big of a problem as CloudTek says it is, doesn't mean that's completely true.   They seem to be trying to minimize the issue on the link you gave me above.  When in reality, if someone can get your session key, they can change your password and access your data.   That's why Atlassian is telling you to RESET your passwords, not change them.  The vulnerability is still there.  If I get your session key/cookie it's good for 30 days unless someone resets the password.   

[Nic Brough -Adaptavist-]

True, but be aware that CloudTek are aggressively marketing their tools, and this "report" looks very much like a way to advertise without appearing to be blatantly selling.