Atlassian Jira Align Improper Authorization Vulnerability Allowing Unauthorized Access to Sensitive Information

A vulnerability in Jira Align related to improper authorization has been identified. This issue allows low-privilege users to access certain endpoints that reveal a limited amount of sensitive information. For instance, a low-level user could view the steps of another user's private checklist. The vulnerability affects Jira Align versions 11.14.0, 11.14.1, 11.15.0, 11.15.1, and 11.16.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as private checklists of other users.

Remediation

Users can upgrade to Jira Align version 11.16.1 to address this vulnerability.