Description
An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2016-2058 | An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change. |
Github GHSA |
GHSA-qrf6-h5fc-7m96 | Mattermost Server does not enforce rate limits on password change attempts |
References
| Link | Providers |
|---|---|
| https://mattermost.com/security-updates/ |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T03:47:34.587Z
Reserved: 2020-06-19T00:00:00.000Z
Link: CVE-2016-11069
No data.
Status : Modified
Published: 2020-06-19T20:15:11.147
Modified: 2024-11-21T02:45:25.687
Link: CVE-2016-11069
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA