CVE-2017-18915

2020-06-1920:15:12

Google

osv.dev

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.7%

JSON

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access.

CPENameOperatorVersion
mattermost-servereq3.6.2
mattermost-servereq3.6.5
mattermost-servereq3.6.1
mattermost-servereq3.6.0
mattermost-servereq3.6.4
mattermost-servereq3.6.7-rc1
mattermost-servereq3.6.6
mattermost-servereq3.6.3

Name	Operator	Version
mattermost-server	eq	3.6.2
mattermost-server	eq	3.6.5
mattermost-server	eq	3.6.1
mattermost-server	eq	3.6.0
mattermost-server	eq	3.6.4
mattermost-server	eq	3.6.7-rc1
mattermost-server	eq	3.6.6
mattermost-server	eq	3.6.3

References

mattermost.com/security-updates/