-
Bug
-
Resolution: Fixed
-
High
-
3.10.1
-
None
-
Edition Enterprise
Version 3.10.1
Build Number 261
Installation Type JIRA Standalone
-
3.1
-
It is possible to see project's components without logging in by just guessing urls, e.g. [jira-installation]/browse/KEY/component/10881.
This will show all the information written on component (issues are not shown). This should be restricted so that it is impossible to see any project information without correct permissions.