Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-65357
HistoryDec 12, 2021 - 12:00 a.m.

Mattermost Log Information Disclosure Vulnerability

2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
17

0.002 Low

EPSS

Percentile

51.4%

Mattermost is an open source collaboration platform from Mattermost, Inc. Mattermost is vulnerable to a logging information disclosure vulnerability that stems from the software’s failure to adequately clean up the user’s password in the audit log when the user fails to create, which could be exploited by an attacker to gain access to this password for the next attack.

CPENameOperatorVersion
mattermost mattermostle6.0.2

0.002 Low

EPSS

Percentile

51.4%

Related for CNVD-2022-65357