Mattermost Password Hash and MFA Secret Exposure Vulnerability

A vulnerability exists in Mattermost versions 10.11.x through 10.11.3, 10.5.x through 10.5.11, and 10.12.x through 10.12.0. These versions fail to properly sanitize user data, allowing system administrators to retrieve password hashes and multi-factor authentication (MFA) secrets. This can be exploited through the POST /api/v4/users/{user_id}/email/verify/member endpoint.

Impact

Exploitation of this vulnerability allows unauthorized access to users' password hashes and MFA secrets, which could lead to account compromise.

Remediation

Users can upgrade to Mattermost versions 11.1.011.0.310.12.210.11.510.5.13 or 11.0.0 to address this vulnerability.