CVE-2024-12247 — Improper propagation of permission scheme updates across cluster nodes

CVE-2024-12247

Improper propagation of permission scheme updates across cluster nodes PUBLISHED

Description (CNA)

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a user to keep old permissions, even if the permission scheme has been updated.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 9.7.0 through 9.7.5; affected 9.8.0 through 9.8.2; affected 9.9.0 through 9.9.2; unaffected 10.0.0; unaffected 9.7.6; unaffected 9.8.3; unaffected 9.9.3

CWE

CWE-863

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.