Improper Access Control

Mattermost is vulnerable to Improper Access Control. The vulnerability is due to Mattermost failing to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting , then it can allows an attacker to override the username and icon when making a post even if the Hardened Mode setting was enabled.