PT-2020-10822

CVE-2019-20859

Published

2020-06-19

Updated

2021-07-21

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.15.0

Description An issue allows login access control to be bypassed via crafted input.

Recommendations For versions prior to 5.15.0, update to version 5.15.0 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾