VYPR
← All advisories
Low severity2.6NVD Advisory· Published Jan 18, 2022· Updated Jun 17, 2026

CVE-2021-37864

CVE-2021-37864

Description

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mattermost/Mattermost3 versions
    cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*range: <=6.1
    • (no CPE)range: <=6.1
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.