Security Bulletin - October 17 2023

[Pedro Felgueiras]

A few minutes ago I received an email from Atlassian the a security notice. 

When I follow the link it leads to this page:

https://confluence.atlassian.com/security/security-advisories-bulletins-1236937381.html

This page mentions a Security Bulletin for today (October 17 2023) but the link isn't working. 

Does anyone have some info on this? 

[Amith Mathur {Appfire}]

Hi @vikrant kadam

Can you share the error message(s) you are getting in the log file ?  

Set the domain in the crowd.server.url and crowd.base.url to be the same, http://sfo1atlassian-crowd-dev-01.nbttech.com:8095 and restart both the instances before you check the SSO. 

You can refer to this page for the "Integrating Crowd with Atlassian JIRA". Verify if you have followed the same steps as indicated. 

Thanks,
Amith Mathur

[vikrant kadam]

@Amith Mathur {Appfire} Tried using the same url in both the applications' crowd.properties file. Restarted both applications. Still not able to login to JIRA. It shows captcha again and again. Shows username password not valid. The steps I followed from, was the same link, "Integrating Crowd with Atlassian JIRA".

[Amith Mathur {Appfire}]

Hi @vikrant kadam

Can you share the error message from the logs? You can share the logs specific to login ones. If you are seeing any synchronization errors, let us know. 

Thanks,
Amith Mathur

[vikrant kadam]

Which log are you referring to? atlassian-jira.log? or the atlassian-jira-http-access.log?

[Amith Mathur {Appfire}]

Hi @vikrant kadam, 

I am referring to the atlassian-jira.log

Thanks,
Amith Mathur

[vikrant kadam]

Unable to paste logs here. Giving me the following error

Error

Your message was not accepted. Check for invalid HTML or try reposting as plain text

[Amith Mathur {Appfire}]

Hi @vikrant kadam, 

Can you check from any other browser and add the log file as an attachment?

Thanks,
Amith Mathur