PT-2022-37853 · Go · Github.Com/Mattermost/Mattermost-Server

Publicado 2022-05-24 · Atualizado 2022-05-24

OSV

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled.

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

GHSA-G24C-FX4V-XG9W

Produtos afetados

Github.Com/Mattermost/Mattermost-Server

Referências · 7

• https://github.com/mattermost/mattermost · Nota
• https://github.com/mattermost/mattermost/commit/15ad24d160cb4604d0605ebbfa53d11a57820706 · Nota
• https://github.com/mattermost/mattermost/commit/fbc170733e86f09b46ba754dd03304733d2f482f · Nota
• https://github.com/mattermost/mattermost/commit/b17fca0d5ee7557e3df1cf1d1da8bd749859e35f · Nota
• https://mattermost.com/security-updates · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18905 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-g24c-fx4v-xg9w · Aviso do Fabricante