7.6
CVE-2026-2476
- EPSS 0.04%
- Veröffentlicht 16.03.2026 11:11:07
- Zuletzt bearbeitet 20.03.2026 18:29:11
- Quelle responsibledisclosure@mattermo
- CVE-Watchlists
- Unerledigt
MS Teams plugin sensitive config values not properly masked in support packets
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mattermost ≫ Ms Teams SwPlatformmattermost Version < 2.3.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.107 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| responsibledisclosure@mattermost.com | 7.6 | 2.3 | 4.7 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.