GHSA-9w4v-9c99-hv7r

ghsaUSosv

Mattermost Server exposes sensitive information via its System Console UI

view advisory published 2022-05-24Licence: CC-BY-4.0

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-11078US	medium6.5	0.94% (61st)	—	2020-06-19
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Con…

references

External citations — patches, advisories, analysis.

https://github.com/mattermost/mattermostPACKAGE
https://mattermost.com/security-updatesWEB
https://nvd.nist.gov/vuln/detail/CVE-2016-11078ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan