Lucene search
Veracode Vulnerability DatabaseVERACODE:47908HistoryJul 04, 2024 - 9:32 a.m.
Improper Authentication
2024-07-0409:32:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
mattermost
vulnerability
improper authentication
remote cluster tokens
timing discrepancy
software
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
Mattermost is vulnerable to Improper Authentication. The vulnerability is caused by the use of constant-time comparison for remote cluster tokens, possibly allowing an attacker to retrieve the token during comparison due to the timing discrepancy.
Related
nvd
nvd
CVE-2024-39830
2024-07-03 09:15:07
cvelist
cvelist
cve
cve
CVE-2024-39830
2024-07-03 09:15:07
osv
osv
CVE-2024-39830
2024-07-03 09:15:07
vulnrichment
vulnrichment
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
Related for VERACODE:47908