← CVE Intelligence

CVE-2023-5194

A system/user manager can demote / deactivate another manager PUBLISHED

Description (CNA)

Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 8.1.0; affected 0 through 7.8.9; unaffected 8.1.1; unaffected 7.8.10

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.