CVE-2016-11078

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information credential fields within config.json via the System Console UI...

CVE-2016-11078

Mattermost Server prior to 3.0.0 is affected. The issue allows an attacker to obtain sensitive information (credential fields in config.json) through the System Console UI. Root cause: exposure of credentials via the System Console; impact concerns confidentiality (C in CVSS v3.1). No remediation...