You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
Next: Root
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
The Atlassian Community can help you and your team get more value out of Atlassian products and practices.
Hi,
We blocked bitbucket.org access from our office network as per the Log4j IOCs,
our RnD would like to access bitbucket.org for their development purposes, but we would like to make sure Log4j stuff is handled before allowing access to that site.
Can anyone confirm that the Log4j vulnerability is no longer a threat in bitbucket.org?
thanks
Semi
Hi @Semi Ara ,
Atlassian Cloud products, and specifically Bitbucket Cloud (accessed from bitbucket.org domain) are not vulnerable as Atlassian already took the necessary measures to mitigate this. You can see the official communication from Atlassian here : https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html
This means that in you case, the Log4j vulnerability is no longer a threat.
Let me know if this helps,
--Alexis
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.