jira discloser information

How it was found

The ticket raising system used by informatica suffers from an informational vulnerability where in an attacker can view certain details about open bugs or project information of informatica. Details include names and potentially and ticket names which an unauthorized personnel can view without login that can be very useful to an attacker.

endpoints:

https://infajira.informatica.com/secure/QueryComponent!Default.jspa

Impact

attacker miss use this information