← CVE Intelligence

CVE-2022-1332

Restricted custom admin role can bypass the restrictions and view the server logs and server config.json file contents PUBLISHED

Description (CNA)

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 6.4 before 6.4.2; affected 6.3 before 6.3.5; affected 6.2 before 6.2.5; affected 5.37 before 5.37.9

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.