PT-2020-10815 · Mattermost · Mattermost Mobile Apps

Published 2020-06-19 · Updated 2021-07-21 · CVE-2019-20852

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.26.0

Description An issue was discovered where local logging is not blocked for sensitive information, such as server addresses or message content.

Recommendations For versions prior to 1.26.0, update to version 1.26.0 or later to resolve the issue. As a temporary workaround, consider restricting access to local logs to minimize the risk of sensitive information exposure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-20852

Affected Products

Mattermost Mobile Apps

References · 4

• https://mattermost.com/security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20852 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20852 · Vendor Advisory
• https://t.me/cvenotify/4511 · Telegram Post