CVE-2017-18883: Critical severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.
Affected Software
6 affected components
Mattermost Mattermost Server<4.1.2
Mattermost Mattermost Server>=4.2.0<4.2.1
Mattermost Mattermost Server=4.3.0-rc1
Mattermost Mattermost Server=4.3.0-rc2
Mattermost Mattermost Server=4.3.0-rc3
Mattermost Mattermost Server=4.3.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:08 PM
Data Sourced
via MITRE·06:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18883?
CVE-2017-18883 is classified as a low severity vulnerability.
2
How do I fix CVE-2017-18883?
To fix CVE-2017-18883, update Mattermost Server to version 4.3.0 or later or apply the relevant security patches.
3
What versions are affected by CVE-2017-18883?
CVE-2017-18883 affects Mattermost Server versions prior to 4.3.0, 4.2.1, and 4.1.2.
4
What type of issue does CVE-2017-18883 represent?
CVE-2017-18883 represents an issue with low entropy for authorization data in OAuth 2.0 service provider configuration.
5
Is CVE-2017-18883 specific to any deployment of Mattermost Server?
Yes, CVE-2017-18883 specifically affects Mattermost Server when configured as an OAuth 2.0 service provider.