Community
Q&A
Trello
Questions
idle timeout settings look like for Trello.

idle timeout settings look like for Trello.

We were notified of a design flaw in the Atlassian suite of products, including Trello, where session cookies do not expire unless a user logs out or after 30 days. Please read their message below:

“This of course could make session hijacking easier for an adversary. We want to know what idle timeout settings look like for Trello.

References:
https://www.darkreading.com/threat-intelligence/security-flaw-in-atlassian-products-affecting-multiple-companies
https://cloudsek.com/security-flaw-in-atlassian-products-jira-confluencetrello-bitbucket-affecting-multiple-companies/

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes

See https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-response-to-claims-regarding-session-tokens-cookies/ba-p/2217925

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Reply

Was this helpful?

Thanks!

TAGS