CVE-2019-20873: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation.
Affected Software
7 affected components
Mattermost Mattermost Server<4.10.8
Mattermost Mattermost Server>=5.7.0<5.7.3
Mattermost Mattermost Server>=5.8.0<5.8.1
Mattermost Mattermost Server=5.9.0-rc1
Mattermost Mattermost Server=5.9.0-rc2
Mattermost Mattermost Server=5.9.0-rc3
Mattermost Mattermost Server=5.9.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20873?
CVE-2019-20873 has a medium severity rating due to its potential to expose sensitive user information.
2
How do I fix CVE-2019-20873?
To fix CVE-2019-20873, upgrade Mattermost Server to version 5.9.0 or later.
3
What versions of Mattermost Server are affected by CVE-2019-20873?
Mattermost Server versions prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8 are affected by CVE-2019-20873.
4
What type of attack does CVE-2019-20873 allow?
CVE-2019-20873 allows attackers to obtain sensitive information during user activation and deactivation.
5
Is there a public exploit for CVE-2019-20873?
As of now, there is no publicly known exploit specifically targeting CVE-2019-20873.