Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2024-04-26T00:00:00 mattermost: fail to limit the number of active sessions 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CWE-400

Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.

A flaw was found in Mattermost, where it fails to limit the number of active sessions. This flaw allows an authenticated attacker to crash the server via repeated requests to the getSessions API after flooding the sessions table.

Red Hat Advanced Cluster Management for Kubernetes 2 Fix deferred rhacm2/acm-grafana-rhel8 Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-docs-rhel8 Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-main-rhel8 Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-rhel8-operator Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-roxctl-rhel8 Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-scanner-db-rhel8 Red Hat Advanced Cluster Security 3 Fix deferred advanced-cluster-security/rhacs-scanner-rhel8 Red Hat OpenShift Container Platform 4 Not affected openshift4/ose-grafana https://www.cve.org/CVERecord?id=CVE-2024-4183 https://nvd.nist.gov/vuln/detail/CVE-2024-4183 https://mattermost.com/security-updates