Lucene search
GoogleOSV:CVE-2022-2401HistoryJul 14, 2022 - 6:15 p.m.
CVE-2022-2401
2022-07-1418:15:08
Google
osv.dev
8
mattermost
information disclosure
apis
software
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
28.4%
Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.
References
Related
cvelist
cvelist
osv
osv
BIT-mattermost-2022-2401
2024-03-06 11:03:22
Mattermost users could access some sensitive information via API call
2022-07-15 00:00:16
prion
prion
Information disclosure
2022-07-14 18:15:00
cve
cve
CVE-2022-2401
2022-07-14 18:15:08
github
github
Mattermost users could access some sensitive information via API call
2022-07-15 00:00:16
nvd
nvd
CVE-2022-2401
2022-07-14 18:15:08
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
28.4%
Related for OSV:CVE-2022-2401