CVE-2024-4198

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.

CVSS v3 2.7 LOW

2.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://mattermost.com/security-updates	Vendor Advisory
https://mattermost.com/security-updates	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mattermost:mattermost_server::::::::
	cpe:2.3:a:mattermost:mattermost_server::::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:-::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc1::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc2::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc3::::::

History

No history.

Information

Published : 2024-04-26 09:15

Updated : 2025-05-12 13:45

NVD link : CVE-2024-4198

Mitre link : CVE-2024-4198

CVE.ORG link : CVE-2024-4198

JSON object : View

Products Affected

mattermost

mattermost_server

CWE

CWE-284

Improper Access Control

NVD-CWE-noinfo

{"id": "CVE-2024-4198", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2024-04-26T09:15:13.097", "references": [{"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.\n\n"}, {"lang": "es", "value": "Las versiones de Mattermost 9.6.0, 9.5.x anteriores a 9.5.3 y 8.1.x anteriores a 8.1.12 no validan completamente los cambios de roles, lo que permite a un atacante autenticado como administrador del equipo degradar a los usuarios a invitados a trav\u00e9s de solicitudes HTTP manipuladas."}], "lastModified": "2025-05-12T13:45:11.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78A6C1F3-95B8-4231-B5D8-C8BB65EA9BFB", "versionEndExcluding": "8.1.12", "versionStartIncluding": "8.1.0"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4846F2D-56D5-4D24-BF0D-2075072A6ADF", "versionEndExcluding": "9.5.3", "versionStartIncluding": "9.5.0"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0F7F432-11D4-428C-BBD6-91AE6B9511B7"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DF0295A-E584-46BD-88CE-E550482D888D"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "798A87CB-1341-4879-9922-8645E6D49DB4"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "245EC64C-50A7-4F6E-B8F6-A5E45CA009EB"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}