If so, you will find the answer to it on the documentation page. In short: XML backups are not a supported backup method for Jira. If you want to backup your instance, you should instead use proper methods to backup the server/virtual machine or the filesystem as well as the database and all other systems that store data for your Jira instance (such as shared storages). Additionally, those backup files are not encrypted which means that whoever has access to those files can "rebuild" your Jira instance; this is also the reason for the health check.
as stated in the documentation, you should ideally not have any XML backup files in these directories. XML backups are not a reliable backup method for Jira. If you use them for temporary purposes like a project import, that's fine, but you should delete them as soon as possible.
Also, if automatic creation of backup files is enabled, you should disable it and ensure that you are creating proper backups of your Jira instance. And then delete the XML backup files or alternatively move them to a safer location (folder) where you are sure no one has access to them. Right now, theoretically any Jira administrator or an attacker abusing a vulnerability could read out those files.
So in short: You should have a proper backup method for your Jira and neither have the automatic backup service enabled, nor should you store any XML backup files in the import or backup directory.
Greetings Philipp
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.