Atlasian default values ​​for APache and Jira DAta a Center

[mirnaelibet.perez.consultor]

In September 2019, we acquired a package of 1000 licenses of the version of JIRA DATA CENTER, Confluence, Gantt charter, tempo, budget, etc. for AXA Seguros and we are in the process of implementing these tools.

We have identified that Atlassian for Apache Jira Confluence handles the dafult values:

• Request limit line: 8190
• Request limit field size: 8190

Although it is the default of Atlassian, in AXA SEguros, we are implementing good information security practices in accordance with CIS BENCHMARKS so it is not possible to make a modification to our parameters that generate security vulnerabilities.

We did not find information about it on your page, so we need to know the following:

• How will Atlassian solve the problems of default values ​​of its products for compliance with good safety practices (CIS BENCHMARKS)?
• And from when will it make available the versions of JIRA DATA CENTER and its ADD-ons that cover this vulnerability? Without another subject,

I am awaiting your prompt response.

[Nic Brough -Adaptavist-]

I assume you mean "Tomcat", not "Apache", as Atlassian do not ship Jira with Apache (a lot of us do put Apache in front of Jira, but it's not part of the package)

The default values for Tomcat for these are not altered by Atlassian, as they do not need to be.

Different clients have different reasons for altering those values, and different values might be desirable. 

You have a reason to change them, so it's up to you to change them.