In a new cyber security incident, a threat actor has announced the sale of a zero-day Remote Code Execution (RCE) exploit targeting Atlassian’s Jira. This exploit allegedly works on the latest version of the Jira desktop app, as well as Jira integrated with Confluence, without requiring any login credentials. Additionally, it is compatible with Okta Single Sign-On (SSO), further broadening its potential impact.
Details of the Offer:
- Exploit Type: Zero-day Remote Code Execution (RCE)
- Target: Atlassian Jira (latest desktop version and integrated with Confluence)
- Login Requirement: None
- SSO Compatibility: Okta SSO
- Price: 800,000 XMR (Monero)
This exploit poses a significant security threat, given the widespread use of Jira and Confluence in corporate environments for project management and collaboration..
The post Zero-Day RCE Exploit of Atlassian Jira for Sale appeared first on Daily Dark Web.