{"id":"CVE-2024-2450","state":"PUBLISHED","title":"Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML","description":"Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML authentication, allowing an authenticated attacker to take over other user accounts via a crafted switch request under specific conditions.\n\n","publishedAt":"2024-03-15T09:12:28.880Z","updatedAt":"2024-08-02T20:35:32.666Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"Mattermost"},"assigner":"Mattermost","products":["Mattermost Mattermost"],"affected":[{"vendor":"Mattermost","product":"Mattermost","defaultStatus":"unaffected","versions":[{"version":"9.5.0","status":"affected"},{"version":"9.4.0","status":"affected","lessThanOrEqual":"9.4.2","versionType":"semver"},{"version":"9.3.0","status":"affected","lessThanOrEqual":"9.3.1","versionType":"semver"},{"version":"9.2.0","status":"affected","lessThanOrEqual":"9.2.5","versionType":"semver"},{"version":"8.1.0","status":"affected","lessThanOrEqual":"8.1.9","versionType":"semver"},{"version":"9.6.0","status":"unaffected"},{"version":"9.4.3","status":"unaffected"},{"version":"9.5.1","status":"unaffected"},{"version":"9.3.2","status":"unaffected"},{"version":"9.2.6","status":"unaffected"},{"version":"8.1.10","status":"unaffected"}]}],"references":["https://mattermost.com/security-updates"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/2xxx/CVE-2024-2450.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-2450","state":"PUBLISHED","datePublished":"2024-03-15T09:12:28.880Z","dateUpdated":"2024-08-02T20:35:32.666Z","assignerShortName":"Mattermost","assignerOrgId":"9302f53e-dde5-4bf3-b2f2-a83f91ac0eee","dateReserved":"2024-03-14T12:57:05.854Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML authentication, allowing an authenticated attacker to take over other user accounts via a crafted switch request under specific conditions.\n\n"}],"affected":[{"vendor":"Mattermost","product":"Mattermost","defaultStatus":"unaffected","versions":[{"version":"9.5.0","status":"affected"},{"version":"9.4.0","status":"affected","lessThanOrEqual":"9.4.2","versionType":"semver"},{"version":"9.3.0","status":"affected","lessThanOrEqual":"9.3.1","versionType":"semver"},{"version":"9.2.0","status":"affected","lessThanOrEqual":"9.2.5","versionType":"semver"},{"version":"8.1.0","status":"affected","lessThanOrEqual":"8.1.9","versionType":"semver"},{"version":"9.6.0","status":"unaffected"},{"version":"9.4.3","status":"unaffected"},{"version":"9.5.1","status":"unaffected"},{"version":"9.3.2","status":"unaffected"},{"version":"9.2.6","status":"unaffected"},{"version":"8.1.10","status":"unaffected"}]}],"references":[{"url":"https://mattermost.com/security-updates"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287: Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Mattermost","orgId":"9302f53e-dde5-4bf3-b2f2-a83f91ac0eee","dateUpdated":"2024-03-15T09:12:28.880Z"},"credits":[{"lang":"en","type":"finder","value":"Juho Nurminen"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Update Mattermost Server to versions 9.6, 9.4.3, 9.5.1, 9.3.2, 9.2.6, 8.1.10 or higher.</p>"}],"value":"Update Mattermost Server to versions 9.6, 9.4.3, 9.5.1, 9.3.2, 9.2.6, 8.1.10 or higher.\n\n"}],"source":{"advisory":"MMSA-2024-00309","defect":["https://mattermost.atlassian.net/browse/MM-56751"],"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://mattermost.com/security-updates","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T19:11:53.648Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"mattermost","product":"mattermost","defaultStatus":"unknown","versions":[{"version":"9.5.0","status":"affected","lessThan":"9.6.0","versionType":"semver"},{"version":"9.4.0","status":"affected","lessThan":"9.4.3","versionType":"semver"},{"version":"9.3.0","status":"affected","lessThan":"9.3.2","versionType":"semver"},{"version":"9.2.0","status":"affected","lessThan":"9.2.6","versionType":"semver"},{"version":"8.1.0","status":"affected","lessThan":"8.1.10","versionType":"semver"}],"cpes":["cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-02T20:31:33.867157Z","id":"CVE-2024-2450","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-02T20:35:32.666Z"}}]}}}