CVE-2016-11078

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2020-06-19

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates/