nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Steps to remediate vulnerability

Krithica G_o3dav6

Hi,
Below is the vulnerability report we received.
Summary:
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint.

Platform Affected: [website]
https://vzmdev.atlassian.net

Please provide steps to remediate this vulnerability

JIRA Version Used: 8.13

Accepted answers

Mohamed Benziane

Hi,

Take a look on this ticket, you will find some workaround.

https://jira.atlassian.com/browse/JRASERVER-71536

All comments

Mohamed Benziane

Hi,

Take a look on this ticket, you will find some workaround.

https://jira.atlassian.com/browse/JRASERVER-71536

Nic Brough -Adaptavist-

I'm afraid this question is utterly unclear.

The reason is you say "Platform Affected: [website] https://vzmdev.atlassian.net" and "Jira Version Used: 8.13" which is nonsense because the site is Jira Cloud which is emphatically not running Jira 8.13 Server/DC.

Which one are you really asking about? Your Cloud site, or a Server install?

Krithica G_o3dav6

Hi Nic,

Sorry i was not clear with the question. We are using Server jira 8.13 and wanted to know the steps to remediate this vulnerability- Information Disclosure vulnerability

Summary:
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint

Thanks,

Krithica

Krithica G_o3dav6

Thanks

Nic Brough -Adaptavist-

Ok, so the vzmdev.atlassian.net mention is a complete red-herring and has nothing to do with it.

Go with Mohamed's answer!

Krithica G_o3dav6

ok thank you

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-software

jira-software-server