Email Address Change without Credential Re-entry Vulnerability

Email Address Change without Credential Re-entry Vulnerability

CVE-2019-20879 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry.

Learn more about our Cis Benchmark Audit For Server Software.