2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mattermost","vendor":"Mattermost","versions":[{"lessThanOrEqual":"8.0.1","status":"affected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.8.9","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"8.1.0"},{"status":"unaffected","version":"8.0.2"},{"status":"unaffected","version":"8.1.1"},{"status":"unaffected","version":"7.8.10"}]}],"source":"responsibledisclosure@mattermost.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"69C58AE2-7A73-4736-B442-4C67D98AD157","versionEndExcluding":"7.8.10","versionStartIncluding":"7.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"A3EF6CB2-48DC-49F2-A478-DA7F87A53D2A","versionEndExcluding":"8.0.2","versionStartIncluding":"8.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"67FF836B-1B31-4FB8-A17F-F98D3FC44AC8","versionEndExcluding":"8.1.1","versionStartIncluding":"8.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation.\n\n"},{"lang":"es","value":"Mattermost no verifica correctamente los permisos al recuperar una publicación, lo que permite un rol del sistema con permiso para administrar canales para leer las publicaciones de una conversación de DM."}],"id":"CVE-2023-5193","lastModified":"2026-06-17T06:47:49.000","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"responsibledisclosure@mattermost.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-5193","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-09-20T15:10:34.173042Z","version":"2.0.3"}}]},"published":"2023-09-29T10:15:10.687","references":[{"source":"responsibledisclosure@mattermost.com","tags":["Vendor Advisory"],"url":"https://mattermost.com/security-updates"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://mattermost.com/security-updates"}],"sourceIdentifier":"responsibledisclosure@mattermost.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"responsibledisclosure@mattermost.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-863"}],"source":"nvd@nist.gov","type":"Primary"}]}
|