← CVE Intelligence

CVE-2022-2366

Incorrect defaults can cause attackers to bypass rate limitations PUBLISHED

Description (CNA)

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 6.7.x 6.7.0; affected 6.x through 6.3.8; affected 6.5.x through 6.5.1; affected 6.6.x through 6.6.1

CWE

CWE-276

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.