-
Module:
BenAdmin
- Security
-
-
Item State:
Production Complete
- Closed
Internal IP addresses was revealed in error response to Employee Feedback file upload and sent mail.
This is additional vulnerability related to ST-107 suggestion.
- blocks
-
ST-107
Web Security: INTERNAL IP ADDRESS REVEALED
-
-
Closed
{"report":{"apdex":1,"isInitial":true,"journeyId":"3f8e9f30-7403-4f91-8f13-1878f4b0f73f","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":665,"redirectCount":0,"resourceLoadedEnd":664.8000000119209,"resourceLoadedStart":90.69999998807907,"resourceTiming":[{"duration":137.89999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":90.69999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":90.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":228.5999999642372,"responseStart":0,"secureConnectionStart":0},{"duration":137.5999999642372,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":91,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":91,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":228.5999999642372,"responseStart":0,"secureConnectionStart":0},{"duration":137.60000002384186,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":91.09999996423721,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":91.09999996423721,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":228.69999998807907,"responseStart":0,"secureConnectionStart":0},{"duration":137.60000002384186,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":91.19999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":91.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":228.80000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":137.4000000357628,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":91.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":91.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":228.80000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":147.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":91.39999997615814,"connectEnd":91.39999997615814,"connectStart":91.39999997615814,"domainLookupEnd":91.39999997615814,"domainLookupStart":91.39999997615814,"fetchStart":91.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":91.39999997615814,"responseEnd":239.19999998807907,"responseStart":239.19999998807907,"secureConnectionStart":91.39999997615814},{"duration":205.0999999642372,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":91.5,"connectEnd":91.5,"connectStart":91.5,"domainLookupEnd":91.5,"domainLookupStart":91.5,"fetchStart":91.5,"redirectEnd":0,"redirectStart":0,"requestStart":91.5,"responseEnd":296.5999999642372,"responseStart":296.5999999642372,"secureConnectionStart":91.5},{"duration":207.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":91.59999996423721,"connectEnd":91.59999996423721,"connectStart":91.59999996423721,"domainLookupEnd":91.59999996423721,"domainLookupStart":91.59999996423721,"fetchStart":91.59999996423721,"redirectEnd":0,"redirectStart":0,"requestStart":91.59999996423721,"responseEnd":299.39999997615814,"responseStart":299.39999997615814,"secureConnectionStart":91.59999996423721},{"duration":208.39999997615814,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":91.69999998807907,"connectEnd":91.69999998807907,"connectStart":91.69999998807907,"domainLookupEnd":91.69999998807907,"domainLookupStart":91.69999998807907,"fetchStart":91.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":91.69999998807907,"responseEnd":300.0999999642372,"responseStart":300.0999999642372,"secureConnectionStart":91.69999998807907},{"duration":208.79999995231628,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":91.80000001192093,"connectEnd":91.80000001192093,"connectStart":91.80000001192093,"domainLookupEnd":91.80000001192093,"domainLookupStart":91.80000001192093,"fetchStart":91.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":91.80000001192093,"responseEnd":300.5999999642372,"responseStart":300.5999999642372,"secureConnectionStart":91.80000001192093},{"duration":209.10000002384186,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":91.89999997615814,"connectEnd":91.89999997615814,"connectStart":91.89999997615814,"domainLookupEnd":91.89999997615814,"domainLookupStart":91.89999997615814,"fetchStart":91.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":91.89999997615814,"responseEnd":301,"responseStart":301,"secureConnectionStart":91.89999997615814},{"duration":209.60000002384186,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":91.89999997615814,"connectEnd":91.89999997615814,"connectStart":91.89999997615814,"domainLookupEnd":91.89999997615814,"domainLookupStart":91.89999997615814,"fetchStart":91.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":91.89999997615814,"responseEnd":301.5,"responseStart":301.5,"secureConnectionStart":91.89999997615814},{"duration":209.9000000357628,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":92.09999996423721,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":92.09999996423721,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":302,"responseStart":0,"secureConnectionStart":0},{"duration":210.80000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":92.19999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":92.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":303,"responseStart":0,"secureConnectionStart":0},{"duration":209.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/ea6f30d2bfdc99578bb23f4a5bac3ecd/shortcuts.js?context=issuenavigation&context=issueaction","startTime":92.19999998807907,"connectEnd":92.19999998807907,"connectStart":92.19999998807907,"domainLookupEnd":92.19999998807907,"domainLookupStart":92.19999998807907,"fetchStart":92.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":92.19999998807907,"responseEnd":302,"responseStart":302,"secureConnectionStart":92.19999998807907},{"duration":210.30000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":92.39999997615814,"connectEnd":92.39999997615814,"connectStart":92.39999997615814,"domainLookupEnd":92.39999997615814,"domainLookupStart":92.39999997615814,"fetchStart":92.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":92.39999997615814,"responseEnd":302.69999998807907,"responseStart":302.69999998807907,"secureConnectionStart":92.39999997615814},{"duration":571.3000000119209,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":93,"connectEnd":93,"connectStart":93,"domainLookupEnd":93,"domainLookupStart":93,"fetchStart":93,"redirectEnd":0,"redirectStart":0,"requestStart":93,"responseEnd":664.3000000119209,"responseStart":664.3000000119209,"secureConnectionStart":93},{"duration":571.7000000476837,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":93.09999996423721,"connectEnd":93.09999996423721,"connectStart":93.09999996423721,"domainLookupEnd":93.09999996423721,"domainLookupStart":93.09999996423721,"fetchStart":93.09999996423721,"redirectEnd":0,"redirectStart":0,"requestStart":93.09999996423721,"responseEnd":664.8000000119209,"responseStart":664.8000000119209,"secureConnectionStart":93.09999996423721},{"duration":231.10000002384186,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":432.39999997615814,"connectEnd":432.39999997615814,"connectStart":432.39999997615814,"domainLookupEnd":432.39999997615814,"domainLookupStart":432.39999997615814,"fetchStart":432.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":432.39999997615814,"responseEnd":663.5,"responseStart":663.5,"secureConnectionStart":432.39999997615814}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":12,"responseStart":85,"responseEnd":86,"domLoading":88,"domInteractive":730,"domContentLoadedEventStart":730,"domContentLoadedEventEnd":790,"domComplete":1171,"loadEventStart":1171,"loadEventEnd":1173,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"81ecb72f2248c7","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":31,"dbReadsTimeInMs":3,"dbConnsTimeInMs":4,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Bug
Zeeshan Chishty (Inactive)
added a comment - Hi Rakesh Roy We can close this ticket as we are not able to reproduce this issue.
When tested in Praetorian Identified vulnerable response page the issue is fixed and no internal IP is revealed. 
ST 169 is additional vulnerability related to
ST-107