PT-2020-8009 · Mattermost · Mattermost Server

CVE-2016-11080

Published

2020-06-19

Updated

2026-07-30

CVSS v4.0

5.1

Medium

Vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.0.0

Description: An issue was discovered in Mattermost Server. It offers superfluous APIs for a Team Administrator to view account details.

Recommendations: For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue.

Fix

DoS

Incorrect Permission

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2016-11080

GHSA-G3F3-P9RC-775P

GO-2025-4063

OPENSUSE-SU-2025:15710-1

OPENSUSE-SU-2026:21483-1

Mattermost Server