[SER-221] RememberMeService does not check that the cookie's random string is equal to the stored token in a constant time comparison. - Create and track feature requests for Atlassian products.

We couldn't load the project sidebar. Refresh the page to try again.
If the problem persists, contact your Jira admin.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 4.0.0
Affects Version/s: None
Labels:
- no-cvss-required
- security

Last commented by user?:
true

Form Name

There are no comments yet on this issue.

Assignee:: David Black

Reporter:: David Black

Participants:: David Black

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 24/Nov/2017 2:39 AM

Updated:: 01/Dec/2017 12:41 AM

Resolved:: 01/Dec/2017 12:41 AM

Last commented:: 7 years, 16 weeks, 1 day ago