CVE-2016-11074: Critical severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.
Affected Software
1 affected component
Mattermost Mattermost Server<3.0.0
Event History
Jun 19, 2020
CVE Published
via MITRE·07:26 PM
Data Sourced
via MITRE·07:26 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-11074?
CVE-2016-11074 has been assessed with moderate severity due to the potential for unauthorized password resets.
2
How do I fix CVE-2016-11074?
To fix CVE-2016-11074, update Mattermost Server to version 3.0.0 or later.
3
What issue does CVE-2016-11074 address?
CVE-2016-11074 addresses the vulnerability that allows password-reset links to be reused.
4
Which versions are affected by CVE-2016-11074?
CVE-2016-11074 affects all versions of Mattermost Server prior to 3.0.0.
5
Is CVE-2016-11074 still a risk for users of Mattermost?
CVE-2016-11074 is no longer a risk for users who have upgraded to Mattermost Server version 3.0.0 or later.