Atlassian Jira Align Improper Authorization Vulnerability Allowing Sensitive Information Disclosure

A vulnerability exists in Jira Align due to improper authorization. Low-privilege users can access certain endpoints that reveal a limited amount of sensitive information. For instance, a user with minimal access was able to view overviews of other teams. This issue affects Jira Align versions 11.14.0, 11.14.1, 11.15.0, 11.15.1, and 11.16.0.

Impact

Exploitation of this vulnerability allows low-privilege users to access unauthorized endpoints, potentially leading to the disclosure of sensitive information.

Remediation

Users can upgrade to Jira Align version 11.16.1 to address this vulnerability.