← CVE Intelligence

CVE-2022-2401

Team members could access sensitive information of other users via an API call PUBLISHED

Description (CNA)

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 6.7.x 6.7.0; affected 6.x through 6.3.8; affected 6.5.x through 6.5.1; affected 6.6.x through 6.6.1

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.