[CWD-5060] Various resources included the current remote directory password in their responses - CVE-2016-10740 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 2.10.1
Affects Version/s: 2.8, 2.9.1
Component/s: None
Labels:

Symptom Severity:
Severity 1 - Critical
Bug Fix Policy:
View Atlassian Server bug fix policy

Various resources in Atlassian Crowd before before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories via examining the responses of various resources.

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 2 Start watching this issue

Created:: 08/Mar/2018 9:08 AM

Updated:: 02/Jan/2020 3:58 AM

Resolved:: 08/Mar/2018 9:44 AM

Details

Description

Attachments

Forms

Activity

[CWD-5060] Various resources included the current remote directory password in their responses - CVE-2016-10740

People

Dates