Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-71317

Browsing serverInfo anonymously gives version number information

XMLWordPrintable

      Issue Summary

      Browsing serverInfo anonymously gives version number information

      Steps to Reproduce

      1. curl https://<jira-server>/rest/api/2/serverInfo
      2. navigate to https://<jira-server>/rest/api/2/serverInfo in a browser

      Expected Results

      Fail to connect

      Actual Results

      The below exception is thrown in the xxxxxxx.log file:

      baseUrl	"https://ocean.agilecraft.xyz"
      version	"8.5.5"
      versionNumbers	
      0	8
      1	5
      2	5
      deploymentType	"Server"
      buildNumber	805005
      buildDate	"2020-06-05T00:00:00.000+0000"
      databaseBuildNumber	805005
      scmInfo	"a6982cff65627fb3fa50669b736095827f0ea0a7"
      serverTitle	"JIRA"
      

      Workaround

      Possible API gateway/proxy setup or whitelist IPs that are trusted

       

              Unassigned Unassigned
              a4eb12018180 James McCulley
              Votes:
              2 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated: