Jira - Arbitrary File Read (CVE-2021-26086)

Jira is affected by a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. This allows attackers to read sensitive information from the target system by sending a specially crafted HTTP GET request to the vulnerable endpoint. The affected endpoints are /WEB-INF/web.xml, /WEB-INF/decorators.xml, /WEB-INF/classes/seraph-config.xml, META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties and META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml and META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml .

The risk exists that a remote unauthenticated attacker could exploit this vulnerability to read sensitive information from arbitrary files located on the file system of the server.

Sniper can read arbitrary files from the target system and extract them as evidence.

Upgrade Jira to the latest version.

https://nvd.nist.gov/vuln/detail/CVE-2021-26086

https://jira.atlassian.com/browse/JRASERVER-72695