NetSight
medium6.5

CVE-2022-2401

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly a…

Impact

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 6.3.9
from 6.4.0 before 6.5.2
Versions 6.6.0, 6.6.1, 6.7.0

Weakness classification

References