JIRASESSIONID values being discovered on crawling and are accessible via URL, why?
![Milan Chheda [INFOSYSTA]](https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net/5b0aa5efb386fc51f32ad227/05be476f-7f36-4364-956d-46a5546db6ff/128 "Milan Chheda [INFOSYSTA]"){kind=avatar}
Milan Chheda [INFOSYSTA]
Rising Star 
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
As a part of penetration testing, we crawled JIRA and as you can see in the below screenshot, JIRASESSIONID values are visible/discovered while crawling the JIRA website.
We would like to know why are they accessible? Are they valid?
