CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.6. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-37864
Severity
LOW
CVSS
2.6
EPSS
0.58%
Original NVD Description
Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)