Critical Vulnerability in syracom AG 2FA Plugin for Atlassian Products

The Secure Login (2FA) plugin for Atlassian Jira, Confluence, and Bitbucket has a serious broken access control vulnerability. This flaw allows attackers with valid user credentials to bypass multi-factor authentication (MFA) by manipulating the user agent in HTTP requests. Successful exploitation can lead to unauthorized access to administrative settings and the ability to disable the 2FA feature entirely. The vulnerability is particularly dangerous as it affects all user roles, not just administrators. Affected systems include Confluence instances using the syracom AG plugin. The vendor has released a patch that should be applied immediately to mitigate the risk. Security professionals are advised to conduct a thorough review of the product for additional vulnerabilities. The vulnerability underscores the importance of robust security measures in software plugins.

Key Points: • A broken access control vulnerability in the 2FA plugin allows MFA bypass. • Attackers can exploit the flaw using valid user credentials and specific user agents. • A patch has been released, and immediate application is recommended.