Security Advisory
CVE-2019-20902
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.