Block ServerInfo API Request

[ronalddb89]

Dear community,

The following API command returns a full representation of the server:

{$BASE_URL}/rest/api/2/serverInfo

For us, this is a major security incident. Is there a possibility to hide this information or to block this request.

[Alexey Matveev]

Hello,

What do you consider sensitive about this info? All this info can be seen in Jira UI. Login to Jira, go to Dashboards and have look at the footer. You will find similar info there:

Here is the footer of my Jira instance:

• Atlassian JIRA Project Management Software (v7.9.0#79000-sha1:3ca552e)