CVE-2019-20852

CWE-532 — Log File Information ExposureCWE-200 — Information Exposure4 documents4 sources
Severity
7.5HIGH
EPSS
0.3%
top 44.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mattermost Mattermost Mobile
Timeline
PublishedJun 19
Latest updateMay 24

Description

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information (e.g., server addresses or message content).

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-fp87-873p-j338: An issue was discovered in Mattermost Mobile Apps before 1↗2022-05-24
▶
CVEList
CVE-2019-20852: An issue was discovered in Mattermost Mobile Apps before 1↗2020-06-19
▶
OSV
python2.7, python3.5, python3.6, python3.7 vulnerabilities↗2019-09-09
▶
CVE-2019-20852 (HIGH CVSS 7.5) | An issue was discovered in Mattermo | cvebase.io