Unrated

Incorrect defaults can cause attackers to bypass rate limitations

CVE-2022-2366 First seen on SecPulse Jul 11, 2022

Original description The description as published by the source.

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web mattermost.com

Key facts

Severity: Unrated
Published: Jul 11, 2022
First seen on SecPulse: Jul 11, 2022
CWE: CWE-276

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:00