{"id":"CVE-2024-4198","state":"PUBLISHED","title":"Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to g","description":"Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.\n\n","publishedAt":"2024-04-26T08:26:11.493Z","updatedAt":"2024-08-01T20:33:52.786Z","severity":{"score":2.7,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","source":"Mattermost"},"assigner":"Mattermost","products":["Mattermost Mattermost"],"affected":[{"vendor":"Mattermost","product":"Mattermost","defaultStatus":"unaffected","versions":[{"version":"9.6.0","status":"affected"},{"version":"9.5.0","status":"affected","lessThanOrEqual":"9.5.2","versionType":"semver"},{"version":"8.1.0","status":"affected","lessThanOrEqual":"8.1.11","versionType":"semver"},{"version":"9.7.0","status":"unaffected"},{"version":"9.6.1","status":"unaffected"},{"version":"9.5.3","status":"unaffected"},{"version":"8.1.12","status":"unaffected"}]}],"references":["https://mattermost.com/security-updates"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:07:56.516Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/4xxx/CVE-2024-4198.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-4198","state":"PUBLISHED","datePublished":"2024-04-26T08:26:11.493Z","dateUpdated":"2024-08-01T20:33:52.786Z","assignerShortName":"Mattermost","assignerOrgId":"9302f53e-dde5-4bf3-b2f2-a83f91ac0eee","dateReserved":"2024-04-25T16:39:53.181Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests.\n\n"}],"affected":[{"vendor":"Mattermost","product":"Mattermost","defaultStatus":"unaffected","versions":[{"version":"9.6.0","status":"affected"},{"version":"9.5.0","status":"affected","lessThanOrEqual":"9.5.2","versionType":"semver"},{"version":"8.1.0","status":"affected","lessThanOrEqual":"8.1.11","versionType":"semver"},{"version":"9.7.0","status":"unaffected"},{"version":"9.6.1","status":"unaffected"},{"version":"9.5.3","status":"unaffected"},{"version":"8.1.12","status":"unaffected"}]}],"references":[{"url":"https://mattermost.com/security-updates"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284: Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Mattermost","orgId":"9302f53e-dde5-4bf3-b2f2-a83f91ac0eee","dateUpdated":"2024-04-26T08:26:11.493Z"},"credits":[{"lang":"en","type":"finder","value":"Juho Nurminen"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Update Mattermost Server to versions 9.7.0, 9.6.1, 9.5.3, 8.1.12 or higher.</p>"}],"value":"Update Mattermost Server to versions 9.7.0, 9.6.1, 9.5.3, 8.1.12 or higher.\n\n"}],"source":{"advisory":"MMSA-2024-00313","defect":["https://mattermost.atlassian.net/browse/MM-56928"],"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-24T19:30:28.234536Z","id":"CVE-2024-4198","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-24T19:30:36.514Z"}},{"title":"CVE Program Container","references":[{"url":"https://mattermost.com/security-updates","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T20:33:52.786Z"}}]}}}