Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-34152
HistoryMay 26, 2024 - 2:15 p.m.

CVE-2024-34152

2024-05-2614:15:09
CWE-284
[email protected]
web.nvd.nist.gov
1
nvd
cve-2024-34152
mattermost
access control
guest
metadata
playbook
graphql

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0

Percentile

9.0%

JSON

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper access control which allows a guest to get the metadata of a public playbook run that linked to the channel they are guest via sending an RHSRuns GraphQL query request to the server

Related

veracode 1
cve 1
vulnrichment 1
cvelist 1
veracode
veracode
Improper Access Control
2024-05-28 09:43:58
cve
cve
CVE-2024-34152
2024-05-26 14:15:09
vulnrichment
vulnrichment
CVE-2024-34152 Playbook Run Metadata leak to Guest
2024-05-26 13:28:16
cvelist
cvelist
CVE-2024-34152 Playbook Run Metadata leak to Guest
2024-05-26 13:28:16

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-34152
veracode1cve1vulnrichment1cvelist1