CVE-2024-36250 - Vulnerability Details

Vendors	Products
Mattermost	Mattermost Server

Link	Providers
https://mattermost.com/security-updates

Type	Values Removed	Values Added
First Time appeared		Mattermost Mattermost mattermost Server
Weaknesses		CWE-294
CPEs		cpe:2.3:a:mattermost:mattermost_server::::::::
Vendors & Products		Mattermost Mattermost mattermost Server

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds
Title		MFA Code Replay
Weaknesses		CWE-303
References		https://mattermost.com/security-updates
Metrics		cvssV3_1 `{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-36250", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "state": "PUBLISHED", "assignerShortName": "Mattermost", "dateReserved": "2024-11-05T09:14:34.842Z", "datePublished": "2024-11-09T17:18:34.703Z", "dateUpdated": "2024-11-12T14:52:39.191Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Mattermost", "vendor": "Mattermost", "versions": [{"lessThanOrEqual": "9.11.2", "status": "affected", "version": "9.11.0", "versionType": "semver"}, {"lessThanOrEqual": "9.5.10", "status": "affected", "version": "9.5.0", "versionType": "semver"}, {"status": "unaffected", "version": "10.1.0"}, {"status": "unaffected", "version": "9.11.3"}, {"status": "unaffected", "version": "9.5.11"}]}], "credits": [{"lang": "en", "type": "finder", "value": "DoyenSec"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Mattermost versions 9.11.x &lt;= 9.11.2, and 9.5.x &lt;= 9.5.10 fail to&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">protect the mfa code against replay attacks</span>, which allows an attacker to reuse the MFA code within<span style=\"background-color: rgb(255, 255, 255);\">&nbsp;~30 seconds </span></p>"}], "value": "Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to\u00a0protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within\u00a0~30 seconds"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-303", "description": "CWE-303: Incorrect Implementation of Authentication Algorithm", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2024-11-09T17:18:34.703Z"}, "references": [{"url": "https://mattermost.com/security-updates"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher.</p>"}], "value": "Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher."}], "source": {"advisory": "MMSA-2024-00370", "defect": ["https://mattermost.atlassian.net/browse/MM-59068"], "discovery": "EXTERNAL"}, "title": "MFA Code Replay", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-12T14:52:26.242892Z", "id": "CVE-2024-36250", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-12T14:52:39.191Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-36250 (string)

assignerOrgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

state : PUBLISHED (string)

assignerShortName : Mattermost (string)

dateReserved : 2024-11-05T09:14:34.842Z (string)

datePublished : 2024-11-09T17:18:34.703Z (string)

dateUpdated : 2024-11-12T14:52:39.191Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Mattermost (string)

vendor : Mattermost (string)

versions : [ »

0 : { »

lessThanOrEqual : 9.11.2 (string)

status : affected (string)

version : 9.11.0 (string)

versionType : semver (string)

}

1 : { »

lessThanOrEqual : 9.5.10 (string)

status : affected (string)

version : 9.5.0 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 10.1.0 (string)

}

3 : { »

status : unaffected (string)

version : 9.11.3 (string)

}

4 : { »

status : unaffected (string)

version : 9.5.11 (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : DoyenSec (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds (string)

}

]

value : Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3.1 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-303 (string)

description : CWE-303: Incorrect Implementation of Authentication Algorithm (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

shortName : Mattermost (string)

dateUpdated : 2024-11-09T17:18:34.703Z (string)

}

references : [ »

0 : { »

url : https://mattermost.com/security-updates (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher. (string)

}

]

value : Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher. (string)

}

]

source : { »

advisory : MMSA-2024-00370 (string)

defect : [ »

0 : https://mattermost.atlassian.net/browse/MM-59068 (string)

]

discovery : EXTERNAL (string)

}

title : MFA Code Replay (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-12T14:52:26.242892Z (string)

id : CVE-2024-36250 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-12T14:52:39.191Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-36250", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "state": "PUBLISHED", "assignerShortName": "Mattermost", "dateReserved": "2024-11-05T09:14:34.842Z", "datePublished": "2024-11-09T17:18:34.703Z", "dateUpdated": "2024-11-12T14:52:39.191Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Mattermost", "vendor": "Mattermost", "versions": [{"lessThanOrEqual": "9.11.2", "status": "affected", "version": "9.11.0", "versionType": "semver"}, {"lessThanOrEqual": "9.5.10", "status": "affected", "version": "9.5.0", "versionType": "semver"}, {"status": "unaffected", "version": "10.1.0"}, {"status": "unaffected", "version": "9.11.3"}, {"status": "unaffected", "version": "9.5.11"}]}], "credits": [{"lang": "en", "type": "finder", "value": "DoyenSec"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Mattermost versions 9.11.x &lt;= 9.11.2, and 9.5.x &lt;= 9.5.10 fail to&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">protect the mfa code against replay attacks</span>, which allows an attacker to reuse the MFA code within<span style=\"background-color: rgb(255, 255, 255);\">&nbsp;~30 seconds </span></p>"}], "value": "Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to\u00a0protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within\u00a0~30 seconds"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-303", "description": "CWE-303: Incorrect Implementation of Authentication Algorithm", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2024-11-09T17:18:34.703Z"}, "references": [{"url": "https://mattermost.com/security-updates"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher.</p>"}], "value": "Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher."}], "source": {"advisory": "MMSA-2024-00370", "defect": ["https://mattermost.atlassian.net/browse/MM-59068"], "discovery": "EXTERNAL"}, "title": "MFA Code Replay", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36250", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-12T14:52:26.242892Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-12T14:52:33.755Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-36250 (string)

assignerOrgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

state : PUBLISHED (string)

assignerShortName : Mattermost (string)

dateReserved : 2024-11-05T09:14:34.842Z (string)

datePublished : 2024-11-09T17:18:34.703Z (string)

dateUpdated : 2024-11-12T14:52:39.191Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Mattermost (string)

vendor : Mattermost (string)

versions : [ »

0 : { »

lessThanOrEqual : 9.11.2 (string)

status : affected (string)

version : 9.11.0 (string)

versionType : semver (string)

}

1 : { »

lessThanOrEqual : 9.5.10 (string)

status : affected (string)

version : 9.5.0 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 10.1.0 (string)

}

3 : { »

status : unaffected (string)

version : 9.11.3 (string)

}

4 : { »

status : unaffected (string)

version : 9.5.11 (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : DoyenSec (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds (string)

}

]

value : Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3.1 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-303 (string)

description : CWE-303: Incorrect Implementation of Authentication Algorithm (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

shortName : Mattermost (string)

dateUpdated : 2024-11-09T17:18:34.703Z (string)

}

references : [ »

0 : { »

url : https://mattermost.com/security-updates (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher. (string)

}

]

value : Update Mattermost to versions 10.1.0, 9.11.3, 9.5.11 or higher. (string)

}

]

source : { »

advisory : MMSA-2024-00370 (string)

defect : [ »

0 : https://mattermost.atlassian.net/browse/MM-59068 (string)

]

discovery : EXTERNAL (string)

}

title : MFA Code Replay (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-36250 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-12T14:52:26.242892Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-12T14:52:33.755Z (string)

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "0800FBCC-ACA5-4DD4-BEF5-4556B40F31BE", "versionEndExcluding": "9.5.11", "versionStartIncluding": "9.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E0D68CA-544B-4031-AEAA-D6DD19F0424D", "versionEndExcluding": "9.11.3", "versionStartIncluding": "9.11.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to\u00a0protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within\u00a0~30 seconds"}, {"lang": "es", "value": "Las versiones 9.11.x &lt;= 9.11.2 y 9.5.x &lt;= 9.5.10 de Mattermost no protegen el c\u00f3digo MFA contra ataques de repetici\u00f3n, lo que permite a un atacante reutilizar el c\u00f3digo MFA en aproximadamente 30 segundos."}], "id": "CVE-2024-36250", "lastModified": "2024-11-14T17:11:23.913", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}]}, "published": "2024-11-09T18:15:14.747", "references": [{"source": "responsibledisclosure@mattermost.com", "tags": ["Vendor Advisory"], "url": "https://mattermost.com/security-updates"}], "sourceIdentifier": "responsibledisclosure@mattermost.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-294"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-303"}], "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0800FBCC-ACA5-4DD4-BEF5-4556B40F31BE (string)

versionEndExcluding : 9.5.11 (string)

versionStartIncluding : 9.5.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E0D68CA-544B-4031-AEAA-D6DD19F0424D (string)

versionEndExcluding : 9.11.3 (string)

versionStartIncluding : 9.11.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds (string)

}

1 : { »

lang : es (string)

value : Las versiones 9.11.x <= 9.11.2 y 9.5.x <= 9.5.10 de Mattermost no protegen el código MFA contra ataques de repetición, lo que permite a un atacante reutilizar el código MFA en aproximadamente 30 segundos. (string)

}

]

id : CVE-2024-36250 (string)

lastModified : 2024-11-14T17:11:23.913 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 2.5 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3.1 (number)

baseSeverity : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 1.4 (number)

source : responsibledisclosure@mattermost.com (string)

type : Secondary (string)

}

]

}

published : 2024-11-09T18:15:14.747 (string)

references : [ »

0 : { »

source : responsibledisclosure@mattermost.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://mattermost.com/security-updates (string)

}

]

sourceIdentifier : responsibledisclosure@mattermost.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-294 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-303 (string)

}

]

source : responsibledisclosure@mattermost.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object