Atlassian Jira Align Improper Authorization Vulnerability Allowing Unauthorized Access to Sensitive Information

A vulnerability in Jira Align exists due to improper authorization, allowing low-privilege users to access certain endpoints that reveal limited sensitive information. For instance, a low-level user could view external reports without having the necessary permissions. This issue affects Jira Align versions 11.14.0, 11.14.1, 11.15.0, 11.15.1, and 11.16.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, such as external reports, by low-privilege users.

Remediation

Users can upgrade to Jira Align version 11.16.1 to address this vulnerability.