Shared Filter properties exposed without authentication

XMLWordPrintable

    • 3.13

      Some URLs are not protected by authentication which could expose some properties in JIRA that users may not wish to reveal.

      Example 1: Searching filters

      http://support.atlassian.com/secure/ManageFilters.jspa?filterView=search

      Example 2: Viewing properties of filters. I can see custom fields, search terms, etc. if they are used within the filter.

      https://support.atlassian.com/secure/IssueNavigator.jspa?mode=hide&requestId=13244

              Assignee:
              Unassigned
              Reporter:
              David Yu
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: