CVE-2024-39810

NVD Published Date: August 22, 2024 at 07:15 AM
NVD Last Modified: August 23, 2024 at 04:16 PM
Download Patch
Vulnerability ID
CVE-2024-39810
Severity
MEDIUM
Severity Score
4.9
Summary
Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the ElasticSearch configuration which allows a System Role with access to the Elasticsearch system console to add any file as a CA path field, such as /dev/zero and, after testing the connection, cause the application to crash.
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE ID
NVD-CWE-noinfo

Recent Publish

CVE-2024-42411

CVE-2024-32939

CVE-2024-39836

CVE-2024-40886

CVE-2024-8071

CVE-2024-8072

See SecOps Solution
in action

Schedule Demo