deleting wicked users

Recently a "white hat" hacker team was hired by our IT department to probe for vulnerabilities in our intranet, including our JIRA installation. (JIRA was not compromised, btw -- woohoo!). During the exercise, they entered all sorts of script into the JIRA sign-in fields, creating spurious users. I was able to delete all the false accounts except the following two, which still remain in my user list:

These two lines are actually listed as usernames in the Users list. Problem is, when I try to delete them, the operation fails with a java.lang.NullPointerException at

com.atlassian.jira.web.action.admin.user.DeleteUser.doValidation(DeleteUser.java:56)

Is there any way to manually remove these users (perhaps in the database itself)?

1 answer

1 accepted

1 votes
Pedro Souza Atlassian Team Jan 28, 2014

Hi there,

Before doing any delete operations in the database, I would recomend you to rename these users, and then try to delete it again.

Since the username is like an URL, perhaps it might be causing conflict in the application side.

If you're still facing the problem even renaming the user, I would strongly recommend you to backup your database before applying any delete operation on this, when you have the backup, the delete query should be this one:

delete from cwd_user
where user_name in ('http://netsparker.com/n?.jspa', 'php://filter//resource=http://netsparker.com/n?.jspa')

I hope it helps!

Regards.

Good suggestion, but unfortunately it looks like I will have to wait until I upgrade to v6.0 to edit usernames. (That feature is not available in 5.x). Rather than mucking about in the database, I think I'll wait for my upgrade.

Thanks!

Suggest an answer

Log in or Join to answer
Community showcase
Sarah Schuster
Posted Jan 29, 2018 in Jira

What are common themes you've seen across successful & failed Jira Software implementations?

Hey everyone! My name is Sarah Schuster, and I'm a Customer Success Manager in Atlassian specializing in Jira Software Cloud. Over the next few weeks I will be posting discussion topics (8 total) to ...

2,775 views 11 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot