Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Cross tenant issue on sort tabs

Description

When wrongly configuring a sort tab in some windows it is possible to disclose information from all tenants.

The ADSortTab query doesn't have a condition to filter by AD_Client_ID

Environment

None

discovered while testing

Activity

Show:
Fixed

Details

Assignee

Reporter

Fix versions

Priority

Created February 13, 2021 at 4:20 PM
Updated April 5, 2021 at 1:00 PM
Resolved February 18, 2021 at 7:19 PM

Flag notifications