CVE-2022-2408 in Mattermost

요약

\~에 의해 MITRE • 2022. 07. 14.

The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Mattermost, Inc.
• 예약하다: 2022. 07. 14.
• 공개: 2022. 07. 14.
• 모더레이션: 수락
• 항목: VDB-203929
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 4.0 (NVD)
• EPSS: 0.00570
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2408
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2408
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2408/