Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

What are the security risks in creating a tunnel from Jira Cloud to Bitbucket Data Center?

Deleted user July 25, 2024

 

What are the security risks in creating a tunnel from Jira Cloud to Bitbucket Data Center?
From Atlassian support:

Link Bitbucket with Jira Software Cloud

If your Bitbucket instance is behind a firewall, we recommend that you use an application tunnel to link Bitbucket with Jira Software Cloud. Application tunnels are available for Bitbucket 6.9 and later.  Learn more about application tunnels

What happens if the Jira Cloud account gets hacked?
Thank you,

1 answer

0 votes
Jim Knepley - ReleaseTEAM
Atlassian Partner
July 25, 2024

The application tunnels you linked to are implemented using secure WebSocket protocols. This means there is an encrypted connection between Jira Cloud and Bitbucket, but that connection cannot be used directly to access other systems within your network. If Bitbucket has behaviors that allows lateral movement, that's another story.

"What happens if the Jira Cloud account gets hacked?"

The compromised account could be used to perform authorized operations, which could range from viewing dashboards or issues to administering the Atlassian Cloud account, depending on the permissions of the compromised account. A compromised account would be a very bad thing for a variety of reasons, application link or otherwise. I don't think it poses a serious risk to your internal network.

If someone manages to get access to the underlying host operating system, a WebSocket wouldn't benefit them significantly since it's in the "application layer" at both ends.

Suggest an answer

Log in or Sign up to answer
TAGS
atlassian, aafp, jira migration, marketing collaboration, end siloed work, streamline workflows, kerrie gottschalk, jira cloud admins, unified marketing, process visibility, team efficiency, cross-team collaboration

How Kerrie Gottschalk unified AAFP’s marketing team with Jira

At the American Academy of Family Physicians, siloed marketing teams faced delays and duplicate work. Kerrie Gottschalk shook things up by moving the department to Jira, streamlining processes, boosting visibility, and sparking stronger collaboration.

Read the story
AUG Leaders

Atlassian Community Events