Описание
Mattermost Server does not restrict SAML certificate path for System Administrators
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.
Пакеты
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
< 3.6.5
3.6.5
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
>= 3.7.0, < 3.7.3
3.7.3
Связанные уязвимости
CVSS3: 4.9
nvd
около 6 лет назад
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.
CVSS3: 4.9
debian
около 6 лет назад
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A ...