{
  "port": 8090,
  "protocol": "tcp",
  "service": "Atlassian Confluence",
  "oneLiner": "Confluence's default HTTP port.",
  "whatItIs": "Atlassian's installation guide states that Confluence runs on port 8090 by default and that the installer prompts for another port if it is taken. The listener is the bundled Tomcat, so a 8090 on a server with Java processes is usually a wiki. IANA registers 8090/tcp to opsmessaging, a vehicle-to-station messaging assignment you will not encounter. Confluence is normally fronted by a reverse proxy on 80/443, with 8090 left bound to all interfaces underneath.",
  "exposure": {
    "verdict": "careful",
    "note": "Confluence has a long history of critical pre-auth vulnerabilities; expose it only through a proxy on a patched version, never as a bare 8090."
  },
  "checkCommand": "curl -sI --max-time 5 http://TARGET:8090/",
  "links": [
    {
      "title": "Atlassian — Installing Confluence on Linux (default port 8090)",
      "url": "https://confluence.atlassian.com/doc/installing-confluence-on-linux-143556824.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8090",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8090",
      "kind": "iana"
    }
  ],
  "ianaName": "opsmessaging"
}
