CVE-2017-18916: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction.
Affected Software
3 affected components
Mattermost Mattermost Server<3.6.7
Mattermost Mattermost Server>=3.7.0<3.7.5
Mattermost Mattermost Server>=3.8.0<3.8.2
Event History
Jun 19, 2020
CVE Published
via MITRE·07:19 PM
Data Sourced
via MITRE·07:19 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18916?
CVE-2017-18916 is a vulnerability in Mattermost Server versions before 3.8.2, 3.7.5, and 3.6.7 that allows API endpoint access control to bypass an integration permission restriction.
2
What is the severity of CVE-2017-18916?
The severity of CVE-2017-18916 is medium, with a CVSS score of 5.3.
3
How does CVE-2017-18916 affect Mattermost Server?
CVE-2017-18916 affects Mattermost Server versions before 3.8.2, 3.7.5, and 3.6.7.
4
How can I fix CVE-2017-18916?
To fix CVE-2017-18916, it is recommended to upgrade Mattermost Server to version 3.8.2, 3.7.5, or 3.6.7.
5
Where can I find more information about CVE-2017-18916?
More information about CVE-2017-18916 can be found at the following reference: https://mattermost.com/security-updates/