Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq67-257h-qpjj

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources.

Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources.

EPSS

Процентиль: 41%
0.00188
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.9
nvd
около 7 лет назад

Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to requests for these resources.

EPSS

Процентиль: 41%
0.00188
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-200