Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-12247 EUVD-2024-50711GHSA-8chw-qpp9-9385

Improper propagation of permission scheme updates across cluster nodes

Published Dec 5, 2024 · Updated Dec 5, 2024 · Assigned by Mattermost

Description

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a user to keep old permissions, even if the permission scheme has been updated.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost 9.7.0 – ≤ 9.7.5, 9.8.0 – ≤ 9.8.2, 9.9.0 – ≤ 9.9.2 10.0.0

References