How do I fix the FREAK vulnerability if I am running Confluence 4.2.3?

Question

We are running Confluence 4.2.3 and it seems to be vulnerable to FREAK attack. Is there a way to fix the issue?

Mallmann · Answer

Hey Hitae,

Just in addition to Rodrigo's answer, here you can find a guide that covers the steps to get your instance upgraded: https://confluence.atlassian.com/display/DOC/Upgrading+Confluence+Manually

In your case you could go straight to the latest version if you wish.

Feel free to raise other questions on this forum or a ticket on our support channel (http://support.atlassian.com) if you have any questions regarding the upgrade process.

Eduardo

Rodrigo Girardi Adami · Answer

Hi Hitae,

I heavily suggest to upgrade Confluence to receive the latest fixes ad security patches. After the EOL of the versions, we do not provide patches for these versions.

I hope this helps.

Cheers,

Rodrigo