Lucene search
MattermostCVELIST:CVE-2021-37861HistoryDec 09, 2021 - 9:32 p.m.
CVE-2021-37861
2021-12-0921:32:28
CWE-532
Mattermost
www.cve.org
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.4%
Mattermost 6.0.2 and earlier fails to sufficiently sanitize user’s password in audit logs when user creation fails.
CNA Affected
[
{
"product": "Mattermost ",
"vendor": "Mattermost ",
"versions": [
{
"lessThanOrEqual": "6.0.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Default credentials
2021-12-09 22:15:00
cnvd
cnvd
Mattermost Log Information Disclosure Vulnerability
2021-12-12 00:00:00
cve
cve
CVE-2021-37861
2021-12-09 22:15:07
osv
osv
CVE-2021-37861
2021-12-09 22:15:07
nvd
nvd
CVE-2021-37861
2021-12-09 22:15:07
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.4%
Related for CVELIST:CVE-2021-37861