Mattermost Server Vulnérabilités

Version

5.0	48
5.1	42
5.2	40
5.3	38
5.4	38

Contre-mesures

Official Fix	66
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Exploitabilité

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	66

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	66

Authentification

Not Defined	0
High	2
Low	18
None	46

Interaction de l'utilisateur

Not Defined	0
Required	4
None	62

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	20
≤7	28
≤8	12
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	20
≤7	28
≤8	12
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	26
≤7	18
≤8	14
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	2
≤4	2
≤5	10
≤6	10
≤7	8
≤8	26
≤9	6
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	18
<2k	18
<5k	30
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	66
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (95): 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.5.1, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.7.3, 4.8, 4.8.1, 4.9, 4.9.1, 4.9.2, 4.9.3, 4.10, 4.10.1, 4.10.2, 4.10.3, 4.10.4, 4.10.5, 4.10.6, 4.10.7, 4.10.8, 4.10.9, 5, 5.0, 5.0.1, 5.0.2, 5.1, 5.1.1, 5.2, 5.2.1, 5.3, 5.4, 5.5, 5.5.1, 5.5.2, 5.6, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.7, 5.7.1, 5.7.2, 5.8, 5.8.1, 5.9, 5.9.1, 5.9.2, 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.10, 5.10.1, 5.11, 5.12, 5.12.1, 5.12.2, 5.12.3, 5.12.4, 5.12.5, 5.13, 5.13.1, 5.13.2, 5.14, 5.14.1, 5.14.2, 5.14.3, 5.14.4, 5.15, 5.15.1, 5.15.2, 5.15.3, 5.16, 5.16.1, 5.16.2, 5.16.3, 5.16.4, 5.17, 5.17.1, 5.17.2, 5.18, 5.19, 5.20, 5.21, 5.22

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
19/06/2020	7.5	7.2	Mattermost Server elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-21264
19/06/2020	5.3	5.1	Mattermost Server Access Restriction elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-21256
19/06/2020	5.8	5.6	Mattermost Server Signup elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-21252
19/06/2020	6.4	6.1	Mattermost Server OAuth Application elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14460
19/06/2020	7.4	7.1	Mattermost Server Channel elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2020-14459
19/06/2020	6.4	6.1	Mattermost Server API divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2020-14458
19/06/2020	5.3	5.1	Mattermost Server Websocket elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14457
19/06/2020	5.3	5.1	Mattermost Server mmctl directory traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14452
19/06/2020	6.4	6.1	Mattermost Server Markdown Renderer dénie de service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14450
19/06/2020	6.4	6.1	Mattermost Server Automatic Direct Message Reply dénie de service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-14448