Low WID-SEC-2024-2145 1 CVE

Mattermost Mobile Apps: Schwachstelle ermöglicht Offenlegung von Informationen

Published Sep 15, 2024 · Updated Sep 15, 2024 · de-DE

Vendor: Mattermost Product: Mattermost Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mattermost Mobile Apps ausnutzen, um Informationen offenzulegen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 1

Medium 4.5

CVE-2024-45833

Mobile password gets saved in dictionary under conditions

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the mas…

Mattermost Mattermost

Sep 16, 2024

Revision history

2024-09-15 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2024-09-15
https://nvd.nist.gov/vuln/detail/CVE-2024-45833
Mattermost Secuirty Update
https://mattermost.com/security-updates/