CVE-2016-11078

2020-06-1920:15:11

Google

osv.dev

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

JSON

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

CPENameOperatorVersion
mattermost-servereq1.1.1
mattermost-servereq2.0.0
mattermost-servereq0.6.0
mattermost-servereq1.4.0
mattermost-servereq1.0.0
mattermost-servereq1.3.0
mattermost-servereq0.5.0
mattermost-servereq1.2.1
mattermost-servereq1.1.0

Name	Operator	Version
mattermost-server	eq	1.1.1
mattermost-server	eq	2.0.0
mattermost-server	eq	0.6.0
mattermost-server	eq	1.4.0
mattermost-server	eq	1.0.0
mattermost-server	eq	1.3.0
mattermost-server	eq	0.5.0
mattermost-server	eq	1.2.1
mattermost-server	eq	1.1.0

References

mattermost.com/security-updates/