Confluence-security-advisory

[Vedant Kulkarni_Trundl]

Hi Experts, Does this vulnerability issue have an impact on Confluence running behind the VPN? Some of the customers have not exposed their Confluence publicly.

[Mark de Bont]

When bad actors are already present on your internal network then there are potentially other problems as well. But it is always a best practice to patch open security issues,.

[Alexis Robert]

Hi @Vedant Kulkarni_Trundl , 

even behind a VPN, an internal user or someone having access to your network could exploit the vulnerability. That's why it's important to patch Confluence even in this case.

Let me know if this helps, 

--Alexis