JIRA Unauthenticated Sensitive Information Disclosure

By Anandhu K A Anandhu K A
Published on 10 Jan 2022
Vulnerability

Description

Jira is a software application used for issue tracking and project management.

An information disclosure vulnerability in Jira before version 8.4.0 allows remote attackers to enumerate usernames via the /rest/api/latest/groupuserpicker resource.

Recommendations

  • Update JIRA to the latest version
Anandhu K A
Written by
Anandhu K A
Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo