Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-31768

Confluence HipChat integration ignores page permissions, exposing sensitive information

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • High
    • None
    • None
    • None

    Description

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      1. Configure Confluence to notify a HipChat channel when a page gets created in a space.
      2. Create a new Page titled "Steps to fire Bob the Slacker". Don't save it yet.
      3. Change the restrictions on the page so only you can see it.
      4. Save the page.
      5. See the entire HipChat channel get notified that you have created a page called "Steps to fire Bob the Slacker".

      The reason I used page permissions is because I didn't want people to know about it. I didn't even know there was HipChat integration in the space. I am sad.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              jpendleton Justus Pendleton (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: