Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-11078

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

VectorNETWORK

PublishedJun 19, 2020, 20:15

Published Bycve@mitre.org

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/mattermost/mattermost-server(Go)03.0.0N/A

References

https://mattermost.com/security-updates/

Weakness Type

CWE-200

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK