CVE-2024-10214

Description

Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in desktop with incorrect settings.

Reserved 2024-10-21 | Published 2024-10-28 | Updated 2024-10-28 | Assigner Mattermost

Problem types

CWE-303: Incorrect Implementation of Authentication Algorithm

Product status

Default status
unaffected

9.11.0
affected

9.5.0
affected

10.0.0
unaffected

9.11.2
unaffected

9.5.10
unaffected

Credits

Ben Cooke finder

References

mattermost.com/security-updates

cve.org (CVE-2024-10214)

nvd.nist.gov (CVE-2024-10214)

Download JSON