CVE-2023-5159 — A User Manager role with user edit permissions could manage/update bots

CVE-2023-5159

A User Manager role with user edit permissions could manage/update bots PUBLISHED

Description (CNA)

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 8.7.9; affected 0 through 8.1.0; unaffected 7.8.10; unaffected 8.1.1

CWE

CWE-863

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.