CVE-2017-18885: Critical severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf.
Affected Software
6 affected components
Mattermost Mattermost Server<4.1.2
Mattermost Mattermost Server>=4.2.0<4.2.1
Mattermost Mattermost Server=4.3.0-rc1
Mattermost Mattermost Server=4.3.0-rc2
Mattermost Mattermost Server=4.3.0-rc3
Mattermost Mattermost Server=4.3.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2017-18885.
2
What is the severity of CVE-2017-18885?
The severity of CVE-2017-18885 is critical with a severity value of 9.8.
3
What is the affected software for CVE-2017-18885?
The affected software for CVE-2017-18885 is Mattermost Server versions before 4.3.0, 4.2.1, and 4.1.2.
4
How can attackers exploit CVE-2017-18885?
Attackers can exploit CVE-2017-18885 by accessing unintended API endpoints on a user's behalf.
5
Is there a fix available for CVE-2017-18885?
Yes, an update to Mattermost Server version 4.3.0 or later can fix CVE-2017-18885.