CVE-2016-4427: High severity zulip desktop vulnerability
Published Jul 28, 2022
·Updated
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.
Affected Software
1 affected component
Zulip zulip<1.3.12
Event History
Jul 28, 2022
CVE Published
via MITRE·04:32 PM
Data Sourced
via MITRE·04:32 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2016-4427.
2
What is the title of the vulnerability?
The title of the vulnerability is 'In zulip before 1.3.12 deactivated users could access messages if SSO was enabled.'
3
What is the severity of CVE-2016-4427?
The severity of CVE-2016-4427 is high, with a severity value of 7.5.
4
What software version is affected by CVE-2016-4427?
Zulip versions up to but excluding 1.3.12 are affected by CVE-2016-4427.
5
How can I fix the vulnerability described in CVE-2016-4427?
To fix the vulnerability described in CVE-2016-4427, upgrade to Zulip version 1.3.12 or higher.