Detections
Analytics
SCA: security update for github.com/mattermost/mattermost-server (GHSA-5fh7-7mw7-mmx5)
low Tenable Cloud Security Plugin ID 410799
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role
changes, which allows an attacker authenticated as a team admin to promote guests to team admins via
crafted HTTP requests. (CVE-2024-4195)
See Also
Plugin Details
Severity: Low
ID: 410799
Version: Revision 1.6
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 8/19/2025
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.4
Vector: CVSS2#AV:N/AC:L/Au:M/C:N/I:P/A:N
CVSS Score Source: CVE-2024-4195
CVSS v3
Risk Factor: Low
Base Score: 2.7
Temporal Score: 2.4
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/26/2024
Vulnerability Publication Date: 4/11/2024
Reference Information
CVE: CVE-2024-4195
cwe: CWE-284