Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-57370

Companion App creates ".tmp.node" files in user's local appdata directory

      The Atlassian Companion app creates temporary executable binaries (.tmp.node files) within the "C:\Users\username\AppData\Local\Temp" directory each time that it runs. These may be falsely flagged by anti-malware software as they are not signed. 

      These files should not be created, instead they should be executed from Companion's install directory. 

            [CONFSERVER-57370] Companion App creates ".tmp.node" files in user's local appdata directory

            Alex K added a comment -

            A fix for this issue is available in Companion 1.0.0. View the Release Notes to see what other issues are resolved.

            If Companion is installed via the MSI, then it will need to be manually updated to the new version.

            Alex K added a comment - A fix for this issue is available in Companion 1.0.0. View the Release Notes to see what other issues are resolved. If Companion is installed via the MSI, then it will need to be manually updated to the new version .

            This is a big problem for enterprises implementing whitelisting, as the files are not signed. Usually the workaround is allowing the folder, but this is not a good solution in user writeable directories.

            Also there is concern that somone can tamper with this file before it is run by the user.

            Placing code in user writable locations is bad practice.

            Vegard Alsli added a comment - This is a big problem for enterprises implementing whitelisting, as the files are not signed. Usually the workaround is allowing the folder, but this is not a good solution in user writeable directories. Also there is concern that somone can tamper with this file before it is run by the user. Placing code in user writable locations is bad practice.

            Alex K added a comment - - edited

            Hi gbmdevelopmenttoolsservice@rbs.com,

            I have looked through your support case and I believe that https://jira.atlassian.com/browse/CONFSERVER-58352 is the correct ticket for the problem you are experiencing. Please follow that ticket for updates. The upcoming release of Companion with the new certificate should be out within the next week. 

            Alex K added a comment - - edited Hi gbmdevelopmenttoolsservice@rbs.com , I have looked through your support case and I believe that  https://jira.atlassian.com/browse/CONFSERVER-58352 is the correct ticket for the problem you are experiencing. Please follow that ticket for updates. The upcoming release of Companion with the new certificate should be out within the next week. 

            DES Tools added a comment -

            May I have an update on this ?
            Is there any ETA ?

            DES Tools added a comment - May I have an update on this ? Is there any ETA ?

            DES Tools added a comment -

            Can we have ETA for this bug ?

            DES Tools added a comment - Can we have ETA for this bug ?

              aknight@atlassian.com Alex K
              drodrigues@atlassian.com Diego (Inactive)
              Affected customers:
              9 This affects my team
              Watchers:
              16 Start watching this issue

                Created:
                Updated:
                Resolved: