Default application configuration files are available for download

XMLWordPrintable

    • 5.02
    • 4.3

      Summary of The Bug

      By browsing to the following URL path user would be able to download any files under <JIRA_Install_Dir>/atlassian-jira/WEB-INF/...

      <Server Base URL>/s/1519/3/1.0/_/WEB-INF/...

      The above URL will be accessible by any users including anonymous even to an instance that does not allow anonymous access

      Notes

      This issue is not reproducible in IE9 (IE8 leads to the same issue)

        1. web-inf-404.png
          web-inf-404.png
          12 kB
        2. a-regular-404.png
          a-regular-404.png
          10 kB

            Assignee:
            Eric Dalgliesh
            Reporter:
            Septa Cahyadiputra (Inactive)
            Votes:
            1 Vote for this issue
            Watchers:
            18 Start watching this issue

              Created:
              Updated:
              Resolved: