Vulnerability Details CVE-2021-37864
Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.7%
CVSS Severity
CVSS v3 Score 2.6
CVSS v2 Score 4.0
Products affected by CVE-2021-37864
-
cpe:2.3:a:mattermost:mattermost:-
-
cpe:2.3:a:mattermost:mattermost:1.21.0
-
cpe:2.3:a:mattermost:mattermost:1.21.1
-
cpe:2.3:a:mattermost:mattermost:1.21.2
-
cpe:2.3:a:mattermost:mattermost:1.22.0
-
cpe:2.3:a:mattermost:mattermost:1.22.1
-
cpe:2.3:a:mattermost:mattermost:1.23.0
-
cpe:2.3:a:mattermost:mattermost:1.23.1
-
cpe:2.3:a:mattermost:mattermost:1.24.0
-
cpe:2.3:a:mattermost:mattermost:1.25.0
-
cpe:2.3:a:mattermost:mattermost:1.25.1
-
cpe:2.3:a:mattermost:mattermost:1.26.0
-
cpe:2.3:a:mattermost:mattermost:1.26.1
-
cpe:2.3:a:mattermost:mattermost:1.26.2
-
cpe:2.3:a:mattermost:mattermost:1.27.0
-
cpe:2.3:a:mattermost:mattermost:1.27.1
-
cpe:2.3:a:mattermost:mattermost:1.28.0
-
cpe:2.3:a:mattermost:mattermost:1.29.0
-
cpe:2.3:a:mattermost:mattermost:1.30.0
-
cpe:2.3:a:mattermost:mattermost:1.30.1
-
cpe:2.3:a:mattermost:mattermost:1.31.0
-
cpe:2.3:a:mattermost:mattermost:1.31.1
-
cpe:2.3:a:mattermost:mattermost:1.31.2
-
cpe:2.3:a:mattermost:mattermost:1.32.0
-
cpe:2.3:a:mattermost:mattermost:1.32.1
-
cpe:2.3:a:mattermost:mattermost:1.32.2
-
cpe:2.3:a:mattermost:mattermost:1.33.0
-
cpe:2.3:a:mattermost:mattermost:1.33.1
-
cpe:2.3:a:mattermost:mattermost:1.34.0
-
cpe:2.3:a:mattermost:mattermost:1.34.1
-
cpe:2.3:a:mattermost:mattermost:1.35.0
-
cpe:2.3:a:mattermost:mattermost:1.35.1
-
cpe:2.3:a:mattermost:mattermost:1.36.0
-
cpe:2.3:a:mattermost:mattermost:1.37.0
-
cpe:2.3:a:mattermost:mattermost:1.38.0
-
cpe:2.3:a:mattermost:mattermost:1.38.1
-
cpe:2.3:a:mattermost:mattermost:1.39.0
-
cpe:2.3:a:mattermost:mattermost:1.40.0
-
cpe:2.3:a:mattermost:mattermost:1.41.0
-
cpe:2.3:a:mattermost:mattermost:1.41.1
-
cpe:2.3:a:mattermost:mattermost:5.34.0
-
cpe:2.3:a:mattermost:mattermost:5.34.1
-
cpe:2.3:a:mattermost:mattermost:5.34.2
-
cpe:2.3:a:mattermost:mattermost:5.34.3
-
cpe:2.3:a:mattermost:mattermost:5.34.4
-
cpe:2.3:a:mattermost:mattermost:5.34.5
-
cpe:2.3:a:mattermost:mattermost:5.35.0
-
cpe:2.3:a:mattermost:mattermost:5.35.1
-
cpe:2.3:a:mattermost:mattermost:5.35.2
-
cpe:2.3:a:mattermost:mattermost:5.35.3
-
cpe:2.3:a:mattermost:mattermost:5.35.4
-
cpe:2.3:a:mattermost:mattermost:5.36.0
-
cpe:2.3:a:mattermost:mattermost:5.36.1
-
cpe:2.3:a:mattermost:mattermost:5.36.2
-
cpe:2.3:a:mattermost:mattermost:5.37.0
-
cpe:2.3:a:mattermost:mattermost:5.37.1
-
cpe:2.3:a:mattermost:mattermost:5.37.10
-
cpe:2.3:a:mattermost:mattermost:5.37.2
-
cpe:2.3:a:mattermost:mattermost:5.37.3
-
cpe:2.3:a:mattermost:mattermost:5.37.4
-
cpe:2.3:a:mattermost:mattermost:5.37.5
-
cpe:2.3:a:mattermost:mattermost:5.37.6
-
cpe:2.3:a:mattermost:mattermost:5.37.7
-
cpe:2.3:a:mattermost:mattermost:5.37.8
-
cpe:2.3:a:mattermost:mattermost:5.37.9
-
cpe:2.3:a:mattermost:mattermost:5.38.0
-
cpe:2.3:a:mattermost:mattermost:5.38.1
-
cpe:2.3:a:mattermost:mattermost:5.38.2
-
cpe:2.3:a:mattermost:mattermost:5.38.3
-
cpe:2.3:a:mattermost:mattermost:5.38.4
-
cpe:2.3:a:mattermost:mattermost:5.39.0
-
cpe:2.3:a:mattermost:mattermost:5.39.1
-
cpe:2.3:a:mattermost:mattermost:5.39.2
-
cpe:2.3:a:mattermost:mattermost:5.39.3
-
cpe:2.3:a:mattermost:mattermost:6.0.0
-
cpe:2.3:a:mattermost:mattermost:6.0.1
-
cpe:2.3:a:mattermost:mattermost:6.0.2
-
cpe:2.3:a:mattermost:mattermost:6.0.3
-
cpe:2.3:a:mattermost:mattermost:6.0.4
-
cpe:2.3:a:mattermost:mattermost:6.1