It is possible to see components without logging in

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: High
    • 3.10.2
    • Affects Version/s: 3.10.1
    • Component/s: None
    • Environment:

      Edition Enterprise
      Version 3.10.1
      Build Number 261
      Installation Type JIRA Standalone

    • 3.1

      It is possible to see project's components without logging in by just guessing urls, e.g. [jira-installation]/browse/KEY/component/10881.

      This will show all the information written on component (issues are not shown). This should be restricted so that it is impossible to see any project information without correct permissions.

              Assignee:
              Unassigned
              Reporter:
              Teemu Qvick
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: