CVE-2017-18106

creationtimestamp| type| source ---|---|--- 2019-03-29 17:28:43+00:00| seen| https://t.me/cibsecurity/3438...

CVE-2017-18106

CVE-2017-18106 affects Atlassian Crowd versions before 2.9.1. The vulnerability stems from the session token’s identifier_hash potentially colliding with another user’s (or a user in a different directory), allowing remote attackers who can authenticate to Crowd or an application using Crowd to h...