Security concerns with Jira Server REST API

[Alexis Baker]

Hi,

Recently our security team ran an audit on Jira, and found security concerns with Jira  Server REST API itself. We deactivated it, thus solving the issue. However we would like to reactivate it without the security concerns. Are there any suggestions on how to remove this security concern?

Thanks,

Alexis

[Milan Chheda [INFOSYSTA] · Accepted solution]

Hello @Alexis Baker

Without knowing the security concerns raised by your security team, it's difficult to suggest/recommend anything. If possible, share the concerns as that would make it easier for everyone to understand the problem and provide better solution to your question.

Also separately, I would recommend you as well security team to go through Security@Atlassian.

Thanks,
Milan

[Alexis Baker]

Thanks Milan, 

Appreciate your reply. I am unsure as if it is safe to publish these details in here! So I have raised a support ticket with more information in.

Thanks,

Alexis 

[Milan Chheda [INFOSYSTA]]

Great. That sounds perfect. If the above link doesn't provide the required information then raising a support ticket is the best thing to do.