CVE-2018-20238 | BDVDB-2026-112772 Detail

AtlassianCrowd

Description#

Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate using an expired user session via an insufficient session expiration vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.atlassian.com/browse/CWD-5361
http://www.securityfocus.com/bid/107036

Exploit#

No public exploit known

History#

Version 12019-02-13Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.