Modica Group incident

Modica Confluence offline due to zero-day vulnerability advised by Atlassian

Resolved after 1 hour 44 minutes, on October 31, 2023.

resolved Oct 31, 2023, 06:22 AM UTC

Atlassian has released a patched version of Confluence which we have applied, and we have restored access to our Confluence pages. Please contact [email protected] if your access to Confluence hasn't been restored.

Started
Oct 31, 2023, 04:37 AM UTC
Resolved
Oct 31, 2023, 06:22 AM UTC
Duration
1h 44m
Detected by Pingoru
Oct 31, 2023, 04:37 AM UTC

Update timeline

  1. investigating Oct 31, 2023, 04:37 AM UTC

    Atlassian has advised us today that there is a zero-day vulnerability that may affect our Confluence instance. Until the vulnerability has been fully resolved we have taken the preventative action of taking our Confluence pages offline. For further information please refer to the following Atlassian article; https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html Please contact [email protected] if you require any information that you would normally access via our confluence pages. We will post any updates to this page as they become available. Regards Modica Support

  2. resolved Oct 31, 2023, 06:22 AM UTC

    Atlassian has released a patched version of Confluence which we have applied, and we have restored access to our Confluence pages. Please contact [email protected] if your access to Confluence hasn't been restored.

Your product runs on more than Modica Group

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →