PT-2020-10865

Name of the Vulnerable Software and Affected Versions Crowd versions prior to 3.4.6 Crowd versions 3.5.0 through 3.5.0 Description Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. Recommendations For versions prior to 3.4.6, update to version 3.4.6 or later. For...

CVE-2019-20902: Undefined Security Weakness

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...