Administrator can change avatar without establishing a Secure Administrator Session (WebSudo)

2014-01-06T16:10:44
ID ATLASSIAN:JRASERVER-36375
Type atlassian
Reporter sander5
Modified 2019-03-28T00:12:29

Description

Administrator can click on avatar of another user and change the avatar. This doesn't require the administrator user to establish a websudo session.