CVE-2017-18917

2020-06-1920:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.8%

JSON

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.

CPENameOperatorVersion
mattermost-servereq3.6.2
mattermost-servereq3.6.5
mattermost-servereq3.6.1
mattermost-servereq3.6.0
mattermost-servereq3.6.4
mattermost-servereq3.6.7-rc1
mattermost-servereq3.6.6
mattermost-servereq3.6.3

Name	Operator	Version
mattermost-server	eq	3.6.2
mattermost-server	eq	3.6.5
mattermost-server	eq	3.6.1
mattermost-server	eq	3.6.0
mattermost-server	eq	3.6.4
mattermost-server	eq	3.6.7-rc1
mattermost-server	eq	3.6.6
mattermost-server	eq	3.6.3

References

mattermost.com/security-updates/