PT-2023-17267 · Unknown · Mattermost

Jo Astoreca · Publicado 2023-04-17 · Atualizado 2024-03-06 · CVE-2023-1831

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost (affected versions not specified)

Description The issue concerns the failure to redact sensitive information from audit logs. Specifically, it affects the user password during user creation and the user password hash in other operations. This occurs when the experimental audit logging configuration is enabled, as defined in the ExperimentalAuditSettings section of the configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Information Disclosure

Enumeração de Fraquezas

CWE-319

CWE-200

Identificadores relacionados

BIT-MATTERMOST-2023-1831

CVE-2023-1831

Produtos afetados

Mattermost

Referências · 5

• https://osv.dev/vulnerability/BIT-mattermost-2023-1831 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1831 · Nota de Segurança
• https://mattermost.com/security-updates · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1831 · Nota
• https://osv.dev/vulnerability/CVE-2023-1831 · Aviso do Fabricante