CVE-2016-4426: Medium severity zulip desktop vulnerability
Published Jul 28, 2022
·Updated
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.
Affected Software
1 affected component
Zulip zulip<1.3.12
Event History
Jul 28, 2022
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2016-4426?
CVE-2016-4426 is a vulnerability in Zulip before version 1.3.12 where bot API keys were accessible to other users in the same realm.
2
How severe is CVE-2016-4426?
CVE-2016-4426 has a severity rating of medium with a CVSS score of 4.3.
3
How does CVE-2016-4426 affect Zulip?
CVE-2016-4426 affects Zulip versions prior to 1.3.12, where bot API keys were accessible to other users in the same realm.
4
How can I fix CVE-2016-4426?
To fix CVE-2016-4426, upgrade to Zulip version 1.3.12 or later.
5
Where can I find more information about CVE-2016-4426?
More information about CVE-2016-4426 can be found at the Zulip documentation: https://zulip.readthedocs.io/en/2.1.7/overview/changelog.html#id35.