One 'dashboard' (project categories) of Jira is visible via incognito/private mode

[supportoffice-it]

Hi,

Our Jira (server v8.9.1) is not accessable for users outside our company, but via incognito/private mode some information can still be retrieved.

According to our maintenance party this was solved in one of the latest Jira updates, but when testing we figured out it is not.

We did the following:

• Open Chrome
• Open Incognito Tab*
• Open URL https://jira.wehkampgroep.nl//rest/api/latest/projectCategory
• Zie JSON data

The information is not very secret, but in our opinion it is strange that everything can be closed for usage by people outside our company, except this part. And what if it happens with sensitive information?

Would be great when someone knows how to solve this.

Many thanks for your help.

Kind regards,
Lisette

[Fazila Ashraf · Accepted solution]

Hi Lisette

I could reproduce this in my environment.. I have raised a ticket with atlassian.. Would recommend you to do the same in https://support.atlassian.com/

[supportoffice-it]

Thanks Fazila, I will raise a ticket :-)

[supportoffice-it]

https://getsupport.atlassian.com/servicedesk/customer/portal/20/GHS-198268