PT-2020-8906
CVE-2018-21263
·
تاريخ النشر
2020-06-19
·
تاريخ التحديث
2020-06-25
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mattermost Server versions prior to 4.7.0
Mattermost Server version 4.6.2 and earlier
Mattermost Server version 4.5.2 and earlier
Description
An issue allows an attacker to authenticate to a different user's account via a crafted SAML response.
Recommendations
For versions prior to 4.7.0, update to version 4.7.0 or later.
For version 4.6.2 and earlier, update to version 4.6.2 or later, then further update to version 4.7.0 or later.
For version 4.5.2 and earlier, update to version 4.5.2 or later, then further update to version 4.7.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾