If you’re planning a large-scale Atlassian implementation, you may be wondering what happens after go-live. Will the users adopt the new product, or are you facing a multi-million dollar mutiny? They say the grass is greener on the other side, but sometimes it takes a look over the fence to confirm for yourself.  There is a level of uncertainty after any change. Despite having access to new features and updated user interface, using Atlassian Cloud… read more

Jira and Jira Service Management are vulnerable to an authentication bypass in its web authentication framework, Jira Seraph. Although the vulnerability is in the core of Jira, it affects first and third party apps that specify roles-required at the webwork1 action namespace level and do not specify it at an action level. For a specific action to be affected, the action will also need to not perform any other authentication or authorization checks. A remote, unauthenticated attacker could exploit this by… read more

Organizations are complex structures with multiple moving and evolving parts. These parts include your teams, organizational hierarchy, and the technologies that support them. If you want to have an efficient organization, these parts need to communicate appropriately. Without an organized process for inter-departmental communication, and clearly defined workflows, everything can quickly devolve into chaos. Thankfully, modern technology provides an innovative solution with service management tools. This article will discuss two kinds of service management tools:… read more

Enterprise Service Management (ESM) hasn’t been around for very long. Most enterprises are more familiar with IT Service Management (ITSM). But the fact is, the concept of ESM has been around for much longer than you think. ESM can provide many benefits for your organization. In this blog post, we discuss these benefits and give some examples of how you can use ESM in real-world business settings. What is Enterprise Service Management? To understand ESM,… read more

Multiple Atlassian products use the third-party software Hazelcast, which is vulnerable to Java deserialization attacks. Hazelcast is used by these products when they’re configured to run as a cluster. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ‘JoinRequest’, resulting in arbitrary code execution. Only Bitbucket Data Center and Confluence Data Center installations are affected by this vulnerability. Please see below for fixes. Affected Bitbucket Data Center Versions Both single and… read more

In this highly digitized age, companies must be able to utilize their IT departments properly. ITSM tools and apps can streamline this, synergizing the complex communication process to help IT departments develop their desired output in the most efficient way possible. But did you know that the principles governing ITSM tools can be applied to other aspects of your company? In this article, we’ll discuss what ITSM is and its different use cases beyond the… read more