Vulnerabilities > CVE-2020-14458 - Unspecified vulnerability in Mattermost Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mattermost

Summary

An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0004.

Vulnerable Configurations

Part Description Count
Application
Mattermost
435