Lucene search

CVE-2024-36492

🗓️ 01 Aug 2024 15:11:15Reported by MattermostType

Mattermost version vulnerability in user modificatio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Github Security Blog	Mattermost failed to disallow the modification of local users when syncing users in shared channels	1 Aug 202415:32	–	github
OSV	GO-2024-3025 Mattermost failed to disallow the modification of local users when syncing users in shared channels in github.com/mattermost/mattermost-server	6 Aug 202422:40	–	osv
OSV	GHSA-56MC-F9W7-2WXQ Mattermost failed to disallow the modification of local users when syncing users in shared channels	1 Aug 202415:32	–	osv
OSV	CVE-2024-36492	1 Aug 202415:15	–	osv
CNVD	Unspecified Vulnerability in Mattermost (CNVD-2024-35160)	5 Aug 202400:00	–	cnvd
Vulnrichment	CVE-2024-36492 Existing local user overwritten by malicious remote	1 Aug 202414:05	–	vulnrichment
Cvelist	CVE-2024-36492 Existing local user overwritten by malicious remote	1 Aug 202414:05	–	cvelist
Veracode	Improper Access Control	9 Aug 202406:24	–	veracode
NVD	CVE-2024-36492	1 Aug 202415:15	–	nvd

Nvd

Node

mattermost mattermostRange9.5.0–9.5.7

mattermost mattermostRange9.7.0–9.7.6

mattermost mattermostRange9.8.0–9.8.2

mattermost mattermostMatch9.9.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "status": "affected",
        "version": "9.9.0"
      },
      {
        "lessThanOrEqual": "9.5.6",
        "status": "affected",
        "version": "9.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.7.5",
        "status": "affected",
        "version": "9.7.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.8.1",
        "status": "affected",
        "version": "9.8.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "9.10.0"
      },
      {
        "status": "unaffected",
        "version": "9.9.1"
      },
      {
        "status": "unaffected",
        "version": "9.5.7"
      },
      {
        "status": "unaffected",
        "version": "9.7.6"
      },
      {
        "status": "unaffected",
        "version": "9.8.2"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2024 15:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS36.4 - 7.4

EPSS0.00152

SSVC

CWE-284