NetSight
high8.8

CVE-2018-21264

An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2.

Impact

An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of a SAML response.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.5.2
from 4.6.0 before 4.6.2
Version 4.7.0

Weakness classification

References