CVE-2024-48941

Summary

CVE-2024-48941 is a newly disclosed vulnerability affecting the Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket. The issue allows remote attackers to bypass two-factor authentication (2FA) by interacting with the /rest endpoint of the affected software. By default, the /rest endpoint is allowlisted, making it easier for attackers to exploit this vulnerability. Successful exploitation could lead to unauthorized access to user accounts and potentially sensitive data. Users are advised to update the Syracom Secure Login plugin to the latest version, which includes a fix for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.