CVE-2024-4198

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.

CVSS v3 2.7 LOW

2.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://mattermost.com/security-updates	Vendor Advisory
https://mattermost.com/security-updates	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mattermost:mattermost_server::::::::
	cpe:2.3:a:mattermost:mattermost_server::::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:-::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc1::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc2::::::
	cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc3::::::

History

12 May 2025, 13:45

Type	Values Removed	Values Added
CPE		cpe:2.3:a:mattermost:mattermost_server:::::::: cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc2:::::: cpe:2.3:a:mattermost:mattermost_server:9.6.0:-:::::: cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc3:::::: cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc1::::::
First Time		Mattermost mattermost Server Mattermost
References	~~() https://mattermost.com/security-updates -~~	() https://mattermost.com/security-updates - Vendor Advisory
CWE		NVD-CWE-noinfo

Information

Published : 2024-04-26 09:15

Updated : 2025-05-12 13:45

NVD link : CVE-2024-4198

Mitre link : CVE-2024-4198

CVE.ORG link : CVE-2024-4198

JSON object : View

Products Affected

mattermost

mattermost_server

CWE

CWE-284

Improper Access Control

NVD-CWE-noinfo

{"id": "CVE-2024-4198", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2024-04-26T09:15:13.097", "references": [{"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "responsibledisclosure@mattermost.com"}, {"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.\n\n"}, {"lang": "es", "value": "Las versiones de Mattermost 9.6.0, 9.5.x anteriores a 9.5.3 y 8.1.x anteriores a 8.1.12 no validan completamente los cambios de roles, lo que permite a un atacante autenticado como administrador del equipo degradar a los usuarios a invitados a trav\u00e9s de solicitudes HTTP manipuladas."}], "lastModified": "2025-05-12T13:45:11.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78A6C1F3-95B8-4231-B5D8-C8BB65EA9BFB", "versionEndExcluding": "8.1.12", "versionStartIncluding": "8.1.0"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4846F2D-56D5-4D24-BF0D-2075072A6ADF", "versionEndExcluding": "9.5.3", "versionStartIncluding": "9.5.0"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0F7F432-11D4-428C-BBD6-91AE6B9511B7"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DF0295A-E584-46BD-88CE-E550482D888D"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "798A87CB-1341-4879-9922-8645E6D49DB4"}, {"criteria": "cpe:2.3:a:mattermost:mattermost_server:9.6.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "245EC64C-50A7-4F6E-B8F6-A5E45CA009EB"}], "operator": "OR"}]}], "sourceIdentifier": "responsibledisclosure@mattermost.com"}