Security Flaw in Crowd Affects User Management for OpenLDAP

CVE-2019-20902

What is CVE-2019-20902?

A vulnerability in Atlassian's Crowd platform allows for the inadvertent reactivation of disabled users from OpenLDAP when upgrading via XML Data Transfer. This flaw impacts versions of Crowd prior to 3.4.6 and those from 3.5.0 before 3.5.1. Organizations using these affected versions may face security risks due to unauthorized user access, highlighting the importance of updating to the latest versions to maintain secure user management practices.

References