CVE-2019-20889: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-access token creation.
Affected Software
9 affected components
Mattermost Mattermost Server>=4.10.0<4.10.5
Mattermost Mattermost Server>=5.5.0<5.5.2
Mattermost Mattermost Server>=5.6.0<5.6.3
Mattermost Mattermost Server=5.7.0-rc1
Mattermost Mattermost Server=5.7.0-rc2
Mattermost Mattermost Server=5.7.0-rc3
Mattermost Mattermost Server=5.7.0-rc4
Mattermost Mattermost Server=5.7.0-rc5
Mattermost Mattermost Server=5.7.0-rc6
Event History
Jun 19, 2020
CVE Published
via MITRE·04:47 PM
Data Sourced
via MITRE·04:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20889?
CVE-2019-20889 has been rated as a medium severity vulnerability due to improper handling of user-access token creation.
2
How do I fix CVE-2019-20889?
To fix CVE-2019-20889, upgrade to Mattermost Server version 5.7 or later.
3
Which versions of Mattermost Server are affected by CVE-2019-20889?
CVE-2019-20889 affects Mattermost Server versions earlier than 5.7, including 5.6.3, 5.5.2, and 4.10.5.
4
What is the nature of the vulnerability in CVE-2019-20889?
CVE-2019-20889 involves mishandled permissions related to the creation of user-access tokens.
5
Is there a specific version of Mattermost Server that addresses CVE-2019-20889?
Yes, Mattermost Server version 5.7 and later effectively address the issues related to CVE-2019-20889.