Improper Access Control

2024-08-2307:54:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

mattermost-server

access control

email addresses

improper control

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.7

Confidence

Low

JSON

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is caused due to a failure to redact remote user’s original email addresses stored in user props when email addresses are otherwise configured not to be visible in the local server.