CVE-2024-36250

MFA Code Replay PUBLISHED

Description (CNA)

Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 9.11.0 through 9.11.2; affected 9.5.0 through 9.5.10; unaffected 10.1.0; unaffected 9.11.3; unaffected 9.5.11

CWE

CWE-303

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.