-
Type:
Enhancement
-
Status:
Closed
-
Priority:
High
-
Resolution:
Done
-
-
-
Module:
BenAdmin
- Security
-
-
Item State:
Production Complete
- Closed
-
Issue Importance:
Must Have
-
Praetorian discovered this vulnerability while manually monitoring the data sent to the application in the server responses. The web banner revealed the application server software name and version number.
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"90c5ffdf-b711-4f47-8a81-2766eea7b6d8","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1085.800000000745,"redirectCount":0,"resourceLoadedEnd":937.1999999992549,"resourceLoadedStart":122.59999999962747,"resourceTiming":[{"duration":154.40000000037253,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":122.59999999962747,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":122.59999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":277,"responseStart":0,"secureConnectionStart":0},{"duration":154.40000000037253,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":122.90000000037253,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":122.90000000037253,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":277.30000000074506,"responseStart":0,"secureConnectionStart":0},{"duration":154.80000000074506,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":123,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":123,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":277.80000000074506,"responseStart":0,"secureConnectionStart":0},{"duration":155,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":123.09999999962747,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":123.09999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":278.09999999962747,"responseStart":0,"secureConnectionStart":0},{"duration":155.40000000037253,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":123.09999999962747,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":123.09999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":278.5,"responseStart":0,"secureConnectionStart":0},{"duration":192.39999999850988,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":123.30000000074506,"connectEnd":123.30000000074506,"connectStart":123.30000000074506,"domainLookupEnd":123.30000000074506,"domainLookupStart":123.30000000074506,"fetchStart":123.30000000074506,"redirectEnd":0,"redirectStart":0,"requestStart":123.30000000074506,"responseEnd":315.69999999925494,"responseStart":315.59999999962747,"secureConnectionStart":123.30000000074506},{"duration":242.09999999962747,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":123.40000000037253,"connectEnd":123.40000000037253,"connectStart":123.40000000037253,"domainLookupEnd":123.40000000037253,"domainLookupStart":123.40000000037253,"fetchStart":123.40000000037253,"redirectEnd":0,"redirectStart":0,"requestStart":123.40000000037253,"responseEnd":365.5,"responseStart":365.5,"secureConnectionStart":123.40000000037253},{"duration":244.59999999962747,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":123.5,"connectEnd":123.5,"connectStart":123.5,"domainLookupEnd":123.5,"domainLookupStart":123.5,"fetchStart":123.5,"redirectEnd":0,"redirectStart":0,"requestStart":123.5,"responseEnd":368.09999999962747,"responseStart":368.09999999962747,"secureConnectionStart":123.5},{"duration":245.2000000011176,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":123.59999999962747,"connectEnd":123.59999999962747,"connectStart":123.59999999962747,"domainLookupEnd":123.59999999962747,"domainLookupStart":123.59999999962747,"fetchStart":123.59999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":123.59999999962747,"responseEnd":368.80000000074506,"responseStart":368.69999999925494,"secureConnectionStart":123.59999999962747},{"duration":245.90000000037253,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":123.69999999925494,"connectEnd":123.69999999925494,"connectStart":123.69999999925494,"domainLookupEnd":123.69999999925494,"domainLookupStart":123.69999999925494,"fetchStart":123.69999999925494,"redirectEnd":0,"redirectStart":0,"requestStart":123.69999999925494,"responseEnd":369.59999999962747,"responseStart":369.59999999962747,"secureConnectionStart":123.69999999925494},{"duration":246.59999999962747,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":123.80000000074506,"connectEnd":123.80000000074506,"connectStart":123.80000000074506,"domainLookupEnd":123.80000000074506,"domainLookupStart":123.80000000074506,"fetchStart":123.80000000074506,"redirectEnd":0,"redirectStart":0,"requestStart":123.80000000074506,"responseEnd":370.40000000037253,"responseStart":370.40000000037253,"secureConnectionStart":123.80000000074506},{"duration":247.19999999925494,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":124,"connectEnd":124,"connectStart":124,"domainLookupEnd":124,"domainLookupStart":124,"fetchStart":124,"redirectEnd":0,"redirectStart":0,"requestStart":124,"responseEnd":371.19999999925494,"responseStart":371.19999999925494,"secureConnectionStart":124},{"duration":258,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":124.09999999962747,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":124.09999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":382.09999999962747,"responseStart":0,"secureConnectionStart":0},{"duration":258.40000000037253,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":124.19999999925494,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":124.19999999925494,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":382.59999999962747,"responseStart":0,"secureConnectionStart":0},{"duration":248,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/ea6f30d2bfdc99578bb23f4a5bac3ecd/shortcuts.js?context=issuenavigation&context=issueaction","startTime":124.19999999925494,"connectEnd":124.19999999925494,"connectStart":124.19999999925494,"domainLookupEnd":124.19999999925494,"domainLookupStart":124.19999999925494,"fetchStart":124.19999999925494,"redirectEnd":0,"redirectStart":0,"requestStart":124.19999999925494,"responseEnd":372.19999999925494,"responseStart":372.19999999925494,"secureConnectionStart":124.19999999925494},{"duration":249,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":124.30000000074506,"connectEnd":124.30000000074506,"connectStart":124.30000000074506,"domainLookupEnd":124.30000000074506,"domainLookupStart":124.30000000074506,"fetchStart":124.30000000074506,"redirectEnd":0,"redirectStart":0,"requestStart":124.30000000074506,"responseEnd":373.30000000074506,"responseStart":373.30000000074506,"secureConnectionStart":124.30000000074506},{"duration":810.5999999996275,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":125.09999999962747,"connectEnd":125.09999999962747,"connectStart":125.09999999962747,"domainLookupEnd":125.09999999962747,"domainLookupStart":125.09999999962747,"fetchStart":125.09999999962747,"redirectEnd":0,"redirectStart":0,"requestStart":125.09999999962747,"responseEnd":935.6999999992549,"responseStart":935.6999999992549,"secureConnectionStart":125.09999999962747},{"duration":812,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":125.19999999925494,"connectEnd":125.19999999925494,"connectStart":125.19999999925494,"domainLookupEnd":125.19999999925494,"domainLookupStart":125.19999999925494,"fetchStart":125.19999999925494,"redirectEnd":0,"redirectStart":0,"requestStart":125.19999999925494,"responseEnd":937.1999999992549,"responseStart":937.1999999992549,"secureConnectionStart":125.19999999925494},{"duration":420.19999999925494,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":520.4000000003725,"connectEnd":520.4000000003725,"connectStart":520.4000000003725,"domainLookupEnd":520.4000000003725,"domainLookupStart":520.4000000003725,"fetchStart":520.4000000003725,"redirectEnd":0,"redirectStart":0,"requestStart":520.4000000003725,"responseEnd":940.5999999996275,"responseStart":940.5999999996275,"secureConnectionStart":520.4000000003725}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":41,"responseStart":115,"responseEnd":118,"domLoading":120,"domInteractive":984,"domContentLoadedEventStart":984,"domContentLoadedEventEnd":1093,"domComplete":1429,"loadEventStart":1429,"loadEventEnd":1432,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":940.0999999996275},{"name":"bigPipe.sidebar-id.end","time":941.0999999996275},{"name":"bigPipe.activity-panel-pipe-id.start","time":941.4000000003725},{"name":"bigPipe.activity-panel-pipe-id.end","time":947.5}],"measures":[],"correlationId":"b1811878131de4","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":47,"dbReadsTimeInMs":3,"dbConnsTimeInMs":4,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Commented code : SharedFunctionWebTier\SharedFunctionWebTier\Modules\SharedSessionModule.cs
This code is commented because for this patch, changes made in IIS Configuration Editor at Web Server.