CVE-2019-20889 - An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5

MEDIUM

An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5

Published Jun 19, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 0.77%

An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-access token creation.

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

Link	Providers	Tags
https://mattermost.com/security-updates/		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 19, 2020

Updated Aug 5, 2024

Reserved Jun 19, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a