Lucene search
PRIOn knowledge basePRION:CVE-2023-1831HistoryApr 17, 2023 - 3:15 p.m.
Code injection
2023-04-1715:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
mattermost
audit logs
user password
user creation
password hash
audit logging configuration
nvd
0.001 Low
EPSS
Percentile
43.2%
Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost_server | eq | 7.9.0 | |
| mattermost_server | ge | 7.8.0 | |
| mattermost_server | lt | 7.8.2 | |
| mattermost_server | lt | 7.7.3 |
References
Related
osv
osv
BIT-mattermost-2023-1831
2024-03-06 11:02:04
CVE-2023-1831
2023-04-17 15:15:06
nvd
nvd
CVE-2023-1831
2023-04-17 15:15:06
cvelist
cvelist
CVE-2023-1831 User password logged in audit logs
2023-04-17 14:21:13
veracode
veracode
Password Disclosure
2023-04-20 04:38:03
cve
cve
CVE-2023-1831
2023-04-17 15:15:06