What is CVE-2024-1949?

CVE-2024-1949 is a security vulnerability affecting certain versions of the Mattermost platform. The severity of this vulnerability varies, and it impacts systems running specific versions of Mattermost, including the server, desktop app, mobile app, and plugins.

Who is impacted by CVE-2024-1949?

This vulnerability affects authenticated users of the Mattermost platform, specifically those using versions 8.1.x before 8.1.9 and 9.4.x before 9.4.2. This security issue allows attackers to gain unauthorized access to individual posts' contents by carefully timing their actions while another user is deleting posts. If you're using one of these affected versions, it's important to be aware of this vulnerability.

What should I do if I’m affected?

If you're affected by the CVE-2024-1949 vulnerability, it's crucial to take action to protect your Mattermost installation. Identify if your Mattermost version is affected (8.1.x before 8.1.9 or 9.4.x before 9.4.2). Update your Mattermost installation to the latest version, which includes necessary security fixes. Stay informed about security updates by regularly checking the Mattermost Security Updates page.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-1949 vulnerability in Mattermost is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-200, which involves exposure of sensitive information to unauthorized actors.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page and the sources listed below.

• NVD - CVE-2024-1949

• Mattermost Security Updates