Lucene search
Veracode Vulnerability DatabaseVERACODE:47219HistoryMay 28, 2024 - 10:01 a.m.
Improper Access Control
2024-05-2810:01:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
mattermost
improper access control
arbitrary post contents
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0
Percentile
9.0%
Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to enforce proper access controls, allowing users to view arbitrary post contents via the /playbook slash command.
Related
cve
cve
CVE-2024-36241
2024-05-26 14:15:09
nvd
nvd
CVE-2024-36241
2024-05-26 14:15:09
vulnrichment
vulnrichment
cvelist
cvelist
CVSS3
3.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.8
Confidence
High
EPSS
0
Percentile
9.0%
Related for VERACODE:47219