Vulnerability Bulletins

CVE-2016-6496

   
Affected software ATLASSIAN
 
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2016-6496