68 matches found
Domain restricted signup is creating enabled users on ApacheDS
When a user signs up to a Confluence instance that has domain restricted sign up enabled, they are normally created as disabled users and are unable to login. However, when the underlying user directory does not support disabling users, such as ApacheDS 1.5, then the user ends up being created as...
Ubuntu 12.04 LTS / 12.10 : keystone vulnerabilities (USN-1730-1)
Nathanael Burton discovered that Keystone did not properly verify disabled users. An authenticated but disabled user would continue to have access rights that were removed. CVE-2013-0282 Jonathan Murray discovered that Keystone would allow XML entity processing. A remote unauthenticated attacker...
USN-1730-1: OpenStack Keystone vulnerabilities
Nathanael Burton discovered that Keystone did not properly verify disabled users. An authenticated but disabled user would continue to have access rights that were removed. CVE-2013-0282 Jonathan Murray discovered that Keystone would allow XML entity processing. A remote unauthenticated attacker...
DSA-2480-3 request-tracker3.8 - regression
Bulletin has no description...
Don't send any notifications to disabled users
Once a user is disabled, they should not receive any notifications...
Don't send any notifications to disabled users
Once a user is disabled, they should not receive any notifications...
