Jira
Atlassian's issue tracking and project tool.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- AppJira
- Framework
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- Data
About
Jira tracks issues, bugs and project work. Like Confluence it is a Java application that runs inside Tomcat and keeps its records in a relational database. Many teams run the two side by side.
How to Spot It
These are signs that a system runs Jira, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Path
/secure/Dashboard.jspa- Response header
X-AREQUESTID: 169x102396262x2- Cookie
JSESSIONID- Cookie
atlassian.xsrf.token
If It Has a Flaw
A flaw in Jira exposes project data and credentials stored in issues, and runs with the service account's reach on the host.
A flaw exposes the data it keeps.
- Data
PostgreSQL
Stacks and Code
Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- Its Code Comes From
Maven CentralVendor Updates