Dan Hranj Atlassian Team

e.atlassian[.]com is unaffected by this issue.

Hi @Tom Bakry By default, these sessions expire when a user is idle for more than 30 days or when they manually log out of their account. * Cloud Admins can configure the idle session duration by creating or modifying authentication policies for their organization. More information here:…

@Leandro Rezende - Once an attacker gains a foothold in an environment they will naturally look for ways to move laterally, escalate privileges, and steal data and Atlassian products may be a target. All non-cloud customers should strive to apply security patches to internal server and data center products in a timely…