CVE-2017-18917: High severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.
Affected Software
3 affected components
Mattermost Mattermost Server>=3.6.0<3.6.7
Mattermost Mattermost Server>=3.7.0<3.7.5
Mattermost Mattermost Server>=3.8.0<3.8.2
Event History
Jun 19, 2020
CVE Published
via MITRE·07:18 PM
Data Sourced
via MITRE·07:18 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18917?
CVE-2017-18917 is a vulnerability that affects Mattermost Server before versions 3.8.2, 3.7.5, and 3.6.7.
2
What is the severity of CVE-2017-18917?
CVE-2017-18917 has a severity score of 7.5, which is considered high.
3
Which software versions are affected by CVE-2017-18917?
CVE-2017-18917 affects Mattermost Server versions 3.6.0 to 3.6.7, 3.7.0 to 3.7.5, and 3.8.0 to 3.8.2.
4
What is the CVE ID?
CVE-2017-18917 is the Common Vulnerabilities and Exposures ID assigned to this vulnerability.
5
How can I fix CVE-2017-18917?
To fix CVE-2017-18917, you should update your Mattermost Server installation to version 3.8.2, 3.7.5, or 3.6.7.