Jira Servers

A misconfiguration within Jira servers has publicly exposed internal sensitive information of several global organizations. Jira is a popular project management tool developed by Atlassian and is used by over 135,000 companies to track project tasks, details, and developments. The issue lies within the visibility options when creating new dashboards and filters. Some organizations include Google, Yahoo, NASA, United Nations, and CODIX –a financial software company used by various institutions and agencies within the European Union. This unintentional breach discloses valuable details that could provide research and development (R&D) information to rival companies or be used by threat actors to conduct future attacks. Further details regarding this breach can be found in the Medium article and the BleepingComputer article. Atlassian support provides application configuration instructions.

Data BreachNJCCIC