CVE-2024-6428

Summary

CVE-2024-6428 is a vulnerability affecting Mattermost versions 9.8.0, 9.7.x up to 9.7.4, 9.6.x up to 9.6.2, and 9.5.x up to 9.5.5. It allows an attacker to create a new user with a user-defined ID by specifying both a remoteId and the user ID during user creation. This issue can lead to broken functionality in User Management, making administrative actions against the affected user ineffective.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.