SB2020061941 - Multiple vulnerabilities in Mattermost, Mattermost Server
Published: June 19, 2020 Updated: July 17, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 9 secuirty vulnerabilities.
1) Incorrect permission assignment for critical resource (CVE-ID: CVE-2019-20875)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a password reset to proceed while an e-mail address is being changed.
2) Incorrect permission assignment for critical resource (CVE-ID: CVE-2019-20876)
The vulnerability allows a remote authenticated user to manipulate or delete data.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy.
3) Information disclosure (CVE-ID: CVE-2019-20877)
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled.
4) Information disclosure (CVE-ID: CVE-2019-20878)
The vulnerability allows a remote authenticated user to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled.
5) Input validation error (CVE-ID: CVE-2019-20868)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.
6) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2019-20872)
The vulnerability allows a local authenticated user to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services.
7) Information disclosure (CVE-ID: CVE-2019-20873)
The vulnerability allows a remote authenticated user to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation.
8) Information disclosure (CVE-ID: CVE-2019-20874)
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change.
9) Improper Privilege Management (CVE-ID: CVE-2019-20859)
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
An issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed via crafted input.
Remediation
Install update from vendor's website.