CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445 vulnerabilities

Vulnerabilities for packages: mattermost-fips, mattermost...

CVE-2025-22445

creationtimestamp| type| source ---|---|--- 2025-01-09 06:57:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113797093464257227 2025-01-09 07:00:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113797106886568510 2025-01-09 07:16:18+00:00| seen|...

CVE-2025-22445 Misleading UI for undefined admin console settings in Calls causes security confusion

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445 Misleading UI for undefined admin console settings in Calls causes security confusion

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

CVE-2025-22445 affects Mattermost Server in the 10.x line up to 10.2 where the UI incorrectly reflects missing admin settings for the Calls feature, causing admin confusion. SUSE advisory SUSE-SU-2025:0297-1 documents the issue and recommends updating to OpenSUSE/Mattermost patch level 10.3 or la...