Vulnerabilities > CVE-2019-20881 - Improper Restriction of Excessive Authentication Attempts vulnerability in Mattermost Server

CVSS 7.3 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

mattermost

CWE-307

NVD

Published: 2020-06-19

Updated: 2024-11-21

Summary

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA.

Vulnerable Configurations

Part	Description	Count
Application	Mattermost Mattermost Mattermost Server - Mattermost Mattermost Server 0.5.0 Mattermost Mattermost Server 0.6.0 Mattermost Mattermost Server 1.0.0 Mattermost Mattermost Server 1.1.0 Mattermost Mattermost Server 1.1.1 Mattermost Mattermost Server 1.2.0 Mattermost Mattermost Server 1.2.1 Mattermost Mattermost Server 1.3.0 Mattermost Mattermost Server 1.4.0 Mattermost Mattermost Server 2.0.0 Mattermost Mattermost Server 2.1.0 Mattermost Mattermost Server 2.2.0 Mattermost Mattermost Server 3.0.0 Mattermost Mattermost Server 3.0.1 Mattermost Mattermost Server 3.0.2 Mattermost Mattermost Server 3.0.3 Mattermost Mattermost Server 3.1.0 Mattermost Mattermost Server 3.2.0 Mattermost Mattermost Server 3.3.0 Mattermost Mattermost Server 3.4.0 Mattermost Mattermost Server 3.5.0 Mattermost Mattermost Server 3.5.1 Mattermost Mattermost Server 3.5.2 Mattermost Mattermost Server 3.5.3 Mattermost Mattermost Server 3.6.0 Mattermost Mattermost Server 3.6.1 Mattermost Mattermost Server 3.6.2 Mattermost Mattermost Server 3.6.3 Mattermost Mattermost Server 3.6.4 Mattermost Mattermost Server 3.6.5 Mattermost Mattermost Server 3.6.6 Mattermost Mattermost Server 3.6.7 Mattermost Mattermost Server 3.7.0 Mattermost Mattermost Server 3.7.1 Mattermost Mattermost Server 3.7.2 Mattermost Mattermost Server 3.7.3 Mattermost Mattermost Server 3.7.4 Mattermost Mattermost Server 3.7.5 Mattermost Mattermost Server 3.7.6 Mattermost Mattermost Server 3.8.0 Mattermost Mattermost Server 3.8.1 Mattermost Mattermost Server 3.8.2 Mattermost Mattermost Server 3.8.3 Mattermost Mattermost Server 3.9.0 Mattermost Mattermost Server 3.9.1 Mattermost Mattermost Server 3.9.2 Mattermost Mattermost Server 3.10.0 Mattermost Mattermost Server 3.10.1 Mattermost Mattermost Server 3.10.2 Mattermost Mattermost Server 3.10.3 Mattermost Mattermost Server 4.0.0 Mattermost Mattermost Server 4.0.1 Mattermost Mattermost Server 4.0.2 Mattermost Mattermost Server 4.0.3 Mattermost Mattermost Server 4.0.4 Mattermost Mattermost Server 4.0.5 Mattermost Mattermost Server 4.1.0 Mattermost Mattermost Server 4.1.1 Mattermost Mattermost Server 4.1.2 Mattermost Mattermost Server 4.2.0 Mattermost Mattermost Server 4.2.1 Mattermost Mattermost Server 4.2.2 Mattermost Mattermost Server 4.3.0 Mattermost Mattermost Server 4.3.1 Mattermost Mattermost Server 4.3.2 Mattermost Mattermost Server 4.3.3 Mattermost Mattermost Server 4.3.4 Mattermost Mattermost Server 4.4.0 Mattermost Mattermost Server 4.4.1 Mattermost Mattermost Server 4.4.2 Mattermost Mattermost Server 4.4.3 Mattermost Mattermost Server 4.4.4 Mattermost Mattermost Server 4.4.5 Mattermost Mattermost Server 4.5.0 Mattermost Mattermost Server 4.5.1 Mattermost Mattermost Server 4.5.2 Mattermost Mattermost Server 4.6.0 Mattermost Mattermost Server 4.6.1 Mattermost Mattermost Server 4.6.2 Mattermost Mattermost Server 4.6.3 Mattermost Mattermost Server 4.7.0 Mattermost Mattermost Server 4.7.1 Mattermost Mattermost Server 4.7.2 Mattermost Mattermost Server 4.7.3 Mattermost Mattermost Server 4.7.4 Mattermost Mattermost Server 4.8.0 Mattermost Mattermost Server 4.8.1 Mattermost Mattermost Server 4.8.2 Mattermost Mattermost Server 4.9.0 Mattermost Mattermost Server 4.9.1 Mattermost Mattermost Server 4.9.2 Mattermost Mattermost Server 4.9.3 Mattermost Mattermost Server 4.9.4 Mattermost Mattermost Server 4.10.0 Mattermost Mattermost Server 4.10.1 Mattermost Mattermost Server 4.10.2 Mattermost Mattermost Server 4.10.3 Mattermost Mattermost Server 4.10.4 Mattermost Mattermost Server 4.10.5 Mattermost Mattermost Server 4.10.6 Mattermost Mattermost Server 4.10.7 Mattermost Mattermost Server 4.10.8 Mattermost Mattermost Server 4.10.9 Mattermost Mattermost Server 4.10.10 Mattermost Mattermost Server 5.0.0 Mattermost Mattermost Server 5.0.1 Mattermost Mattermost Server 5.0.2 Mattermost Mattermost Server 5.0.3 Mattermost Mattermost Server 5.1.0 Mattermost Mattermost Server 5.1.1 Mattermost Mattermost Server 5.1.2 Mattermost Mattermost Server 5.2.0 Mattermost Mattermost Server 5.2.1 Mattermost Mattermost Server 5.2.2 Mattermost Mattermost Server 5.3.0 Mattermost Mattermost Server 5.3.1 Mattermost Mattermost Server 5.4.0 Mattermost Mattermost Server 5.5.0 Mattermost Mattermost Server 5.5.1 Mattermost Mattermost Server 5.5.2 Mattermost Mattermost Server 5.5.3 Mattermost Mattermost Server 5.6.0 Mattermost Mattermost Server 5.6.1 Mattermost Mattermost Server 5.6.2 Mattermost Mattermost Server 5.6.3 Mattermost Mattermost Server 5.6.4 Mattermost Mattermost Server 5.6.5 Mattermost Mattermost Server 5.7.0 Mattermost Mattermost Server 5.7.1 Mattermost Mattermost Server 5.7.2 Mattermost Mattermost Server 5.7.3	290

Common Weakness Enumeration (CWE)

CWE-307 - Improper Restriction of Excessive Authentication Attempts

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References