CVE-2017-18883 - CERT CVE

  1. CVE-2017-18883

ID CVE-2017-18883
Sažetak An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.
Reference
CVSS
Base: 6.4
Impact: 4.9
Exploitability:10.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:N/AC:L/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 02-07-2020 - 18:06
Objavljeno 19-06-2020 - 19:15