Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources.
References
Link | Resource |
---|---|
https://jira.atlassian.com/browse/CWD-5060 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:16:39
Updated: 2022-10-03T16:16:39
Reserved: 2022-10-03T00:00:00
Link: CVE-2016-10740
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-01-29T02:29:00.217
Modified: 2019-01-31T17:01:50.070
Link: CVE-2016-10740
JSON object: View
Redhat Information
No data.
CWE