CVE-2022-0708 — Team Creator's Email Address is disclosed to Team Members via one of the APIs

CVE-2022-0708

Team Creator's Email Address is disclosed to Team Members via one of the APIs PUBLISHED

Description (CNA)

Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected unspecified through 6.3.0; unaffected 6.2.2 before unspecified; unaffected 6.1.2 before unspecified; unaffected 5.37.7 before unspecified

CWE

CWE-200

References

https://mattermost.com/security-updates/

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/

CISA-ADP

No English description supplied.

No references supplied.