An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details.
References
Link | Resource |
---|---|
https://mattermost.com/security-updates/ | Vendor Advisory |
Configurations
Information
Published : 2020-06-19 13:15
Updated : 2020-06-25 08:02
NVD link : CVE-2016-11080
Mitre link : CVE-2016-11080
JSON object : View
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource
Products Affected
mattermost
- mattermost_server