Does anyone have their Jira service desk open for anyone to submit request? Security concerns?

[Jennifer Volpe]

Hey there!

Considering making our Jira service desk instance available to to anyone without signing up or signing in.. Just wondering if anyone has experienced any security issues having it open like this? 

using Jira Cloud***

Would love to hear any thoughts, thank you!! 

[Thomas Deiler]

Dear @Jennifer Volpe ,

before you open your Jira to world consider following:

• are you able to upgrade your Jira version with a couple of hours when a security advisory has been published (CVE-2019-11581)?
• do you have a team that can monitor 24/7 what's going on (->IDS)?
• do you have a enterprise firewall in front of?
• do you own a DMZ?
• in worst case, is the data stored on jira crucial when compromised? (2nd instance behind DMZ?)
• and more ...

So long

Thomas

[Jennifer Volpe]

@Thomas Deiler thank you for your reply! We are using Jira cloud so I dont know if the jira update versioning would apply? 

[Thomas Deiler]

Sorry, from your original post I couldn't see that Cloud is your platform. Then you have to rely that the upper topics are handled by Atlassian. At least you could think about the 5th topic.

So long

Thomas