Description
Atlassian JIRA is a tool that is used for bug tracking, issue tracking, and project management.
This instance of Atlassian JIRA is misconfigured to allow an attacker to sign up (create a new account) just by navigating to the signup page that is accessible at the URL /servicedesk/customer/user/signup. After the attacker has created a new account it's possible for him/her to access the support portal.
Remediation
Please consult the Atlassian documentation (from the References link) that explains how to choose the right settings to secure your Atlassian JIRA installation.
References
Related Vulnerabilities
WordPress Plugin PWA for WP & AMP Security Bypass (1.7.32)
WordPress Plugin Simple:Press Security Bypass and Arbitrary File Upload Vulnerabilities (4.1.2)
WordPress Plugin InfiniteWP Client Security Bypass (1.3.7)
Joomla! Core Security Bypass (1.7.0 - 3.9.22)
WordPress Plugin Rencontre-Dating Site Security Bypass (1.6.9)