Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-37864
HistoryJan 18, 2022 - 5:15 p.m.

Code injection

2022-01-1817:15:00
PRIOn knowledge base
www.prio-n.com
1

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.

CPENameOperatorVersion
mattermostle6.1

Related

cnvd 1
cvelist 1
cve 1
osv 1
nvd 1
cnvd
cnvd
Mattermost Access Control Error Vulnerability
2022-01-21 00:00:00
cvelist
cvelist
CVE-2021-37864 Users can view the contents of an archived channel when access is explicitly denied by the system admin
2022-01-18 16:52:19
cve
cve
CVE-2021-37864
2022-01-18 17:15:08
osv
osv
CVE-2021-37864
2022-01-18 17:15:08
nvd
nvd
CVE-2021-37864
2022-01-18 17:15:08

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON
Related for PRION:CVE-2021-37864
cnvd1cvelist1cve1osv1nvd1