Critical Vulnerability

[fnusla]

We refer to the security advisory received regarding a critical vulnerability that exists in Jira Service Management.  We would like to know what are the major security risks and if we can forego the temporary workaround if we intend to upgrade from Server to cloud in January 2022.

If there remains a risk and we need to apply the temporary workaround now, kindly forward the guide to do so.

[Joseph Chung Yin · Accepted solution]

@fnusla -

Without know which advisory that you are talking about, it is difficult to answer your question.  My best recommendation for you is to contact directly with Atlassian Support to obtain further assistance.

Best, Joseph Chung Yin

Jira/JSM Functional Lead, Global Infrastructure Applications Team

Viasat Inc.

[Nic Brough -Adaptavist-]

The security risks will be detailed in the vulnerability report.

We don't know which one you might be talking about, nor anything about your system, so we can't tell you if you are affected or you could ignore it until you migrate to Cloud.

The vulnerability report will also tell you where the docs are on workarounds or fixes for it.