CVE-2019-20843: High severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files.
Affected Software
8 affected components
Mattermost Mattermost Server<5.9.7
Mattermost Mattermost Server>=5.15.0<5.15.4
Mattermost Mattermost Server>=5.16.0<5.16.4
Mattermost Mattermost Server>=5.17.0<5.17.2
Mattermost Mattermost Server=5.18.0-rc1
Mattermost Mattermost Server=5.18.0-rc2
Mattermost Mattermost Server=5.18.0-rc3
Mattermost Mattermost Server=5.18.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·01:25 PM
Data Sourced
via MITRE·01:25 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20843?
CVE-2019-20843 has a medium severity level due to weak permissions for sensitive configuration files.
2
How do I fix CVE-2019-20843?
To fix CVE-2019-20843, update Mattermost Server to version 5.18.0 or later.
3
What versions of Mattermost are affected by CVE-2019-20843?
CVE-2019-20843 affects Mattermost Server versions before 5.18.0, including 5.9.7 and earlier versions.
4
What are the risks associated with CVE-2019-20843?
The risks associated with CVE-2019-20843 include unauthorized access to sensitive configuration files, which could lead to security breaches.
5
Is CVE-2019-20843 a remote code execution vulnerability?
No, CVE-2019-20843 is not a remote code execution vulnerability, but it relates to weak permissions that can expose sensitive data.