Security Advisory

CVE-2017-18894

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-19 18:10:56

Last updated 2024-08-05 21:37:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. Sometimes. resource-owner authorization is bypassed, allowing account takeover.

← Browse all CVEs View on cve.org ↗