Exploit / PoCcritical
Researcher releases PoC code for critical Atlassian Crowd RCE flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-11580 | Unauthenticated RCE in Atlassian Crowd and Crowd Data Center | 9.8 | 95% | KEVRansomwarePoC | KEV |
From the original article
1 min read at helpnetsecurity.com
A researcher has released proof-of-concept code for a critical code execution vulnerability (CVE-2019-11580) in Atlassian Crowd, a centralized identity management solution providing single sign-on and user identity. Atlassian plugged the hole in late May, but administrators that failed to implement it should consider doing so now, as full-fledged exploits are likely to pop up soon.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.