CVE-2021-37861CWE-532

Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails

Medium · published December 9, 2021

CVSS v3.1
5.8
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00908 · 59.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2021-12-09T21:32Z
EPSS history
Timeline
  • 09 DEC 21:32Z
    Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails
    cvelistv5