Mattermost Server up to 5.0 Access Restriction Command permission assignment

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Mattermost Server up to 5.0. Affected by this vulnerability is some unknown processing of the component Access Restriction. Upgrading to version 5.1 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561530	10/26/2020	VulD...	confirm_url	https://mattermost.com/security-updates/	cve.mitre.org	10/26/2020	accepted	70
10189420	06/21/2020	VulD...	cve_nvd_summary	An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for group-message channel creation) via the Group message slash command.	mitre.org	06/21/2020	accepted	100
10189419	06/21/2020	VulD...	cve_assigned	1592524800	mitre.org	06/21/2020	accepted	100
10189412	06/21/2020	VulD...	cvss3_nvd_a	N	nist.gov	06/21/2020	accepted	100
10189411	06/21/2020	VulD...	cvss3_nvd_i	L	nist.gov	06/21/2020	accepted	100
10189410	06/21/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/21/2020	accepted	100
10189409	06/21/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/21/2020	accepted	100
10189408	06/21/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/21/2020	accepted	100
10189407	06/21/2020	VulD...	cvss3_nvd_pr	L	nist.gov	06/21/2020	accepted	100
10189406	06/21/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/21/2020	accepted	100
10189405	06/21/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/21/2020	accepted	100
10189392	06/21/2020	VulD...	cvss2_nvd_ai	N	nist.gov	06/21/2020	accepted	100
10189391	06/21/2020	VulD...	cvss2_nvd_ii	P	nist.gov	06/21/2020	accepted	100
10189390	06/21/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/21/2020	accepted	100
10189389	06/21/2020	VulD...	cvss2_nvd_au	S	nist.gov	06/21/2020	accepted	100
10189388	06/21/2020	VulD...	cvss2_nvd_ac	L	nist.gov	06/21/2020	accepted	100
10189387	06/21/2020	VulD...	cvss2_nvd_av	N	nist.gov	06/21/2020	accepted	100
10189377	06/21/2020	VulD...	cwe	732 (privilege escalation)		06/21/2020	accepted	100
10189429	06/21/2020	VulD...	cvss3_nvd_basescore	4.3	nist.gov	06/21/2020	accepted	90
10189428	06/21/2020	VulD...	cvss3_vuldb_rc	X		06/21/2020	accepted	90