Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.
References
History

Fri, 06 Dec 2024 23:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Mattermost

Published: 2022-01-18T16:52:19

Updated: 2024-12-06T23:11:16.668Z

Reserved: 2021-08-02T00:00:00

Link: CVE-2021-37864

cve-icon Vulnrichment

Updated: 2024-08-04T01:30:09.016Z

cve-icon NVD

Status : Modified

Published: 2022-01-18T17:15:08.400

Modified: 2024-11-21T06:16:01.327

Link: CVE-2021-37864

cve-icon Redhat

No data.