CVE-2017-18896: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to the logs via a REST API version 3 logging endpoint.
Affected Software
6 affected components
Mattermost Mattermost Server<4.0.5
Mattermost Mattermost Server>=4.1.0<4.1.1
Mattermost Mattermost Server=4.2.0-rc1
Mattermost Mattermost Server=4.2.0-rc2
Mattermost Mattermost Server=4.2.0-rc3
Mattermost Mattermost Server=4.2.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18896?
CVE-2017-18896 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2017-18896?
To fix CVE-2017-18896, upgrade Mattermost Server to version 4.2.0 or later.
3
Which versions of Mattermost Server are affected by CVE-2017-18896?
CVE-2017-18896 affects Mattermost Server versions prior to 4.2.0, including 4.1.1 and 4.0.5.
4
What does CVE-2017-18896 allow an attacker to do?
CVE-2017-18896 allows attackers to add DEBUG lines to the logs via a REST API logging endpoint.
5
Is there a way to mitigate CVE-2017-18896 without upgrading?
No specific mitigation for CVE-2017-18896 is available other than upgrading.