PT-2023-32058 · Mattermost · Mattermost Desktop App

Patrice Kolb

·

CVE-2023-5339

·

Published

2023-10-17

·

Updated

2023-10-24

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mattermost Desktop (affected versions not specified)
Description Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation, resulting in logging all keystrokes, including password entry, being logged.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insertion into Log File

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-532CWE-200

Related Identifiers

CVE-2023-5339

Affected Products

Mattermost Desktop App