EUVD-2017-9243

Malware in sbrugna...

CVE-2017-18106

The identifierhash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifierhash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain...

PT-2019-8255

Name of the Vulnerable Software and Affected Versions Atlassian Crowd versions prior to 2.9.1 Description The issue allows remote attackers who can authenticate to gain access to another user's session by making their identifier hash collide with another user's session identifier hash. This...