Description

It was detected that Jira Projects is accessible anonymously, without authentication.

Remediation

Consider restricting unauthenticated access to projects.

References

Control anonymous user access

Related Vulnerabilities

WordPress Plugin Gmail SMTP Arbitrary File Disclosure (1.1.0)

GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239)

Express running in development mode

Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0046)

Severity

Low

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Weak Credentials