Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to improper access control. The vulnerability is due to insufficient enforcement of MFA checks due to a failure to verify that the requesting user matches the target user ID when modifying MFA settings, allowing privilege escalation...