CVE-2024-54083 - Vulnerability Details

Vendors	Products
Mattermost	Mattermost

Link	Providers
https://mattermost.com/security-updates

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00159}`	epss `{'score': 0.00171}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.
Title		DoS via lack of type validation in Calls
Weaknesses		CWE-1287
References		https://mattermost.com/security-updates
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-54083", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "state": "PUBLISHED", "assignerShortName": "Mattermost", "dateReserved": "2024-12-11T10:11:03.771Z", "datePublished": "2024-12-16T08:02:19.214Z", "dateUpdated": "2024-12-16T16:04:03.406Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Mattermost", "vendor": "Mattermost", "versions": [{"lessThanOrEqual": "10.1.2", "status": "affected", "version": "10.1.0", "versionType": "semver"}, {"lessThanOrEqual": "10.0.2", "status": "affected", "version": "10.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.11.4", "status": "affected", "version": "9.11.0", "versionType": "semver"}, {"lessThanOrEqual": "9.5.12", "status": "affected", "version": "9.5.0", "versionType": "semver"}, {"status": "unaffected", "version": "10.2.0"}, {"status": "unaffected", "version": "2.22.0"}, {"status": "unaffected", "version": "10.1.3"}, {"status": "unaffected", "version": "10.0.3"}, {"status": "unaffected", "version": "9.11.5"}, {"status": "unaffected", "version": "9.5.13"}]}], "credits": [{"lang": "en", "type": "finder", "value": "c0rydoras (c0rydoras)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Mattermost versions 10.1.x &lt;= 10.1.2, 10.0.x &lt;= 10.0.2, 9.11.x &lt;= 9.11.4, 9.5.x &lt;= 9.5.12 fail to properly validate the type of&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">callProps</span>&nbsp;which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.</p>"}], "value": "Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of\u00a0callProps\u00a0which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1287", "description": "CWE-1287: Improper Validation of Specified Type of Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2024-12-16T08:02:19.214Z"}, "references": [{"url": "https://mattermost.com/security-updates"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher.</p>"}], "value": "Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher."}], "source": {"advisory": "MMSA-2024-00388", "defect": ["https://mattermost.atlassian.net/browse/MM-61165"], "discovery": "EXTERNAL"}, "title": "DoS via lack of type validation in Calls", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-16T16:03:33.303704Z", "id": "CVE-2024-54083", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-16T16:04:03.406Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-54083 (string)

assignerOrgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

state : PUBLISHED (string)

assignerShortName : Mattermost (string)

dateReserved : 2024-12-11T10:11:03.771Z (string)

datePublished : 2024-12-16T08:02:19.214Z (string)

dateUpdated : 2024-12-16T16:04:03.406Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Mattermost (string)

vendor : Mattermost (string)

versions : [ »

0 : { »

lessThanOrEqual : 10.1.2 (string)

status : affected (string)

version : 10.1.0 (string)

versionType : semver (string)

}

1 : { »

lessThanOrEqual : 10.0.2 (string)

status : affected (string)

version : 10.0.0 (string)

versionType : semver (string)

}

2 : { »

lessThanOrEqual : 9.11.4 (string)

status : affected (string)

version : 9.11.0 (string)

versionType : semver (string)

}

3 : { »

lessThanOrEqual : 9.5.12 (string)

status : affected (string)

version : 9.5.0 (string)

versionType : semver (string)

}

4 : { »

status : unaffected (string)

version : 10.2.0 (string)

}

5 : { »

status : unaffected (string)

version : 2.22.0 (string)

}

6 : { »

status : unaffected (string)

version : 10.1.3 (string)

}

7 : { »

status : unaffected (string)

version : 10.0.3 (string)

}

8 : { »

status : unaffected (string)

version : 9.11.5 (string)

}

9 : { »

status : unaffected (string)

version : 9.5.13 (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : c0rydoras (c0rydoras) (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post. (string)

}

]

value : Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-1287 (string)

description : CWE-1287: Improper Validation of Specified Type of Input (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

shortName : Mattermost (string)

dateUpdated : 2024-12-16T08:02:19.214Z (string)

}

references : [ »

0 : { »

url : https://mattermost.com/security-updates (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher. (string)

}

]

value : Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher. (string)

}

]

source : { »

advisory : MMSA-2024-00388 (string)

defect : [ »

0 : https://mattermost.atlassian.net/browse/MM-61165 (string)

]

discovery : EXTERNAL (string)

}

title : DoS via lack of type validation in Calls (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-12-16T16:03:33.303704Z (string)

id : CVE-2024-54083 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-16T16:04:03.406Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-54083", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-16T16:03:33.303704Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-16T16:03:59.750Z"}}], "cna": {"title": "DoS via lack of type validation in Calls", "source": {"defect": ["https://mattermost.atlassian.net/browse/MM-61165"], "advisory": "MMSA-2024-00388", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "c0rydoras (c0rydoras)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Mattermost", "product": "Mattermost", "versions": [{"status": "affected", "version": "10.1.0", "versionType": "semver", "lessThanOrEqual": "10.1.2"}, {"status": "affected", "version": "10.0.0", "versionType": "semver", "lessThanOrEqual": "10.0.2"}, {"status": "affected", "version": "9.11.0", "versionType": "semver", "lessThanOrEqual": "9.11.4"}, {"status": "affected", "version": "9.5.0", "versionType": "semver", "lessThanOrEqual": "9.5.12"}, {"status": "unaffected", "version": "10.2.0"}, {"status": "unaffected", "version": "2.22.0"}, {"status": "unaffected", "version": "10.1.3"}, {"status": "unaffected", "version": "10.0.3"}, {"status": "unaffected", "version": "9.11.5"}, {"status": "unaffected", "version": "9.5.13"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher.", "supportingMedia": [{"type": "text/html", "value": "<p>Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher.</p>", "base64": false}]}], "references": [{"url": "https://mattermost.com/security-updates"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of\u00a0callProps\u00a0which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.", "supportingMedia": [{"type": "text/html", "value": "<p>Mattermost versions 10.1.x &lt;= 10.1.2, 10.0.x &lt;= 10.0.2, 9.11.x &lt;= 9.11.4, 9.5.x &lt;= 9.5.12 fail to properly validate the type of&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">callProps</span>&nbsp;which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1287", "description": "CWE-1287: Improper Validation of Specified Type of Input"}]}], "providerMetadata": {"orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "shortName": "Mattermost", "dateUpdated": "2024-12-16T08:02:19.214Z"}}}, "cveMetadata": {"cveId": "CVE-2024-54083", "state": "PUBLISHED", "dateUpdated": "2024-12-16T16:04:03.406Z", "dateReserved": "2024-12-11T10:11:03.771Z", "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee", "datePublished": "2024-12-16T08:02:19.214Z", "assignerShortName": "Mattermost"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-54083 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-16T16:03:33.303704Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-16T16:03:59.750Z (string)

}

]

cna : { »

title : DoS via lack of type validation in Calls (string)

source : { »

defect : [ »

0 : https://mattermost.atlassian.net/browse/MM-61165 (string)

]

advisory : MMSA-2024-00388 (string)

discovery : EXTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : c0rydoras (c0rydoras) (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Mattermost (string)

product : Mattermost (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.1.0 (string)

versionType : semver (string)

lessThanOrEqual : 10.1.2 (string)

}

1 : { »

status : affected (string)

version : 10.0.0 (string)

versionType : semver (string)

lessThanOrEqual : 10.0.2 (string)

}

2 : { »

status : affected (string)

version : 9.11.0 (string)

versionType : semver (string)

lessThanOrEqual : 9.11.4 (string)

}

3 : { »

status : affected (string)

version : 9.5.0 (string)

versionType : semver (string)

lessThanOrEqual : 9.5.12 (string)

}

4 : { »

status : unaffected (string)

version : 10.2.0 (string)

}

5 : { »

status : unaffected (string)

version : 2.22.0 (string)

}

6 : { »

status : unaffected (string)

version : 10.1.3 (string)

}

7 : { »

status : unaffected (string)

version : 10.0.3 (string)

}

8 : { »

status : unaffected (string)

version : 9.11.5 (string)

}

9 : { »

status : unaffected (string)

version : 9.5.13 (string)

}

]

defaultStatus : unaffected (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Update Mattermost to versions 10.2.0, 2.22.0, 10.1.3, 10.0.3, 9.11.5, 9.5.13 or higher. (string)

base64 : false (boolean)

}

]

}

]

references : [ »

0 : { »

url : https://mattermost.com/security-updates (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-1287 (string)

description : CWE-1287: Improper Validation of Specified Type of Input (string)

}

]

}

]

providerMetadata : { »

orgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

shortName : Mattermost (string)

dateUpdated : 2024-12-16T08:02:19.214Z (string)

}

cveMetadata : { »

cveId : CVE-2024-54083 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-16T16:04:03.406Z (string)

dateReserved : 2024-12-11T10:11:03.771Z (string)

assignerOrgId : 9302f53e-dde5-4bf3-b2f2-a83f91ac0eee (string)

datePublished : 2024-12-16T08:02:19.214Z (string)

assignerShortName : Mattermost (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of\u00a0callProps\u00a0which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post."}], "id": "CVE-2024-54083", "lastModified": "2024-12-16T08:15:05.317", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}]}, "published": "2024-12-16T08:15:05.317", "references": [{"source": "responsibledisclosure@mattermost.com", "url": "https://mattermost.com/security-updates"}], "sourceIdentifier": "responsibledisclosure@mattermost.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1287"}], "source": "responsibledisclosure@mattermost.com", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to properly validate the type of callProps which allows a user to cause a client side (webapp and mobile) DoS to users of particular channels, by sending a specially crafted post. (string)

}

]

id : CVE-2024-54083 (string)

lastModified : 2024-12-16T08:15:05.317 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : responsibledisclosure@mattermost.com (string)

type : Secondary (string)

}

]

}

published : 2024-12-16T08:15:05.317 (string)

references : [ »

0 : { »

source : responsibledisclosure@mattermost.com (string)

url : https://mattermost.com/security-updates (string)

}

]

sourceIdentifier : responsibledisclosure@mattermost.com (string)

vulnStatus : Received (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-1287 (string)

}

]

source : responsibledisclosure@mattermost.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object