VDB
CVE-2016-11078
CVE-2016-11078
PUBLISHED
CVSS 6.5 MEDIUM
Reported by mitre · Published June 19, 2020
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| github.com | mattermost/mattermost-server | 0, 0 |
| n/a | n/a | n/a, *, n/a |
Timeline
- Jun 19, 2020 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
References
- x_refsource_CONFIRM
- https://github.com/advisories/GHSA-9w4v-9c99-hv7r advisory
- https://mattermost.com/security-updates url
- https://nvd.nist.gov/vuln/detail/CVE-2016-11078 advisory
- https://github.com/mattermost/mattermost url