Vulnerabilities > CVE-2021-37866 - Insufficient Session Expiration vulnerability in Mattermost Boards 0.10.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |