An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a user via a crafted request sent to /rest/synchronizer/1.0/technicalUser.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| deviniti | issue_sync | * |