Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-13302

It is possible to see components without logging in

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • High
    • 3.10.2
    • 3.10.1
    • None

    • Edition Enterprise
      Version 3.10.1
      Build Number 261
      Installation Type JIRA Standalone

    Description

      It is possible to see project's components without logging in by just guessing urls, e.g. [jira-installation]/browse/KEY/component/10881.

      This will show all the information written on component (issues are not shown). This should be restricted so that it is impossible to see any project information without correct permissions.

      Attachments

        Activity

          People

            Unassigned Unassigned
            8407b6966c3e Teemu Qvick
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: