CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP

published October 1, 2020

CVSS
—
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00872 · 58.5th percentile
Published
2020-10-01T01:30Z
EPSS history
Timeline
  • 01 OCT 01:30Z
    Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP
    cvelistv5