Low severityNVD Advisory· Published Oct 28, 2024· Updated Oct 28, 2024
Incorrect Session Creation with Desktop SSO
CVE-2024-10214
Description
Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/mattermost/mattermost/server/v8Go | < 8.0.0-20240821220019-0d6b1070a26f | 8.0.0-20240821220019-0d6b1070a26f |
Affected products
42- osv-coords41 versionspkg:apk/chainguard/mattermost-10.0pkg:apk/chainguard/mattermost-10.0-compatpkg:apk/chainguard/mattermost-10.1pkg:apk/chainguard/mattermost-10.1-compatpkg:apk/chainguard/mattermost-10.2pkg:apk/chainguard/mattermost-10.2-compatpkg:apk/chainguard/mattermost-10.3pkg:apk/chainguard/mattermost-10.3-compatpkg:apk/chainguard/mattermost-10.4pkg:apk/chainguard/mattermost-10.4-compatpkg:apk/chainguard/mattermost-10.5pkg:apk/chainguard/mattermost-10.5-compatpkg:apk/chainguard/mattermost-9.11pkg:apk/chainguard/mattermost-9.11-compatpkg:apk/chainguard/mattermost-fips-10.5pkg:apk/chainguard/mattermost-fips-10.5-compatpkg:apk/chainguard/mattermost-fips-10.6pkg:apk/chainguard/mattermost-fips-10.6-compatpkg:apk/chainguard/mattermost-fips-10.7pkg:apk/chainguard/mattermost-fips-10.7-compatpkg:apk/chainguard/mattermost-fips-9.11pkg:apk/chainguard/mattermost-fips-9.11-compatpkg:apk/wolfi/mattermost-10.0pkg:apk/wolfi/mattermost-10.0-compatpkg:apk/wolfi/mattermost-10.1pkg:apk/wolfi/mattermost-10.1-compatpkg:apk/wolfi/mattermost-10.2pkg:apk/wolfi/mattermost-10.2-compatpkg:apk/wolfi/mattermost-10.3pkg:apk/wolfi/mattermost-10.3-compatpkg:apk/wolfi/mattermost-10.4pkg:apk/wolfi/mattermost-10.4-compatpkg:apk/wolfi/mattermost-10.5pkg:apk/wolfi/mattermost-10.5-compatpkg:golang/github.com/mattermost/mattermost/server/v8pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweedpkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Package%20Hub%2012
< 0+ 40 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 10.7.1-r1
- (no CPE)range: < 10.7.1-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 8.0.0-20240821220019-0d6b1070a26f
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-1.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241104T154416-5.1
- Range: 9.11.0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.