NetSight
critical9.8

CVE-2017-18915

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.

Impact

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access.

Affected products

VendorProductAffected versions
MattermostMattermost Server
from 3.6.0 before 3.6.7
from 3.7.0 before 3.7.5
from 3.8.0 before 3.8.2

Weakness classification

References