FlawAtlas
Search the atlas
CVE-2016-11078 Moderate

Mattermost Server exposes sensitive information via its System Console UI in github.com/mattermost/mattermost-server

Mattermost Server exposes sensitive information via its System Console UI in github.com/mattermost/mattermost-server

Exploit probability 0.9%
Published October 30, 2025
Required by Not available
Last source change March 3, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

1 explicit affected versions

Go github.com/mattermost/mattermost-server
Go github.com/mattermost/mattermost-server

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:21483-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2016-11078

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

View original source
Open Source Vulnerabilities GO-2025-4057

Mattermost Server exposes sensitive information via its System Console UI in github.com/mattermost/mattermost-server

View original source
Open Source Vulnerabilities GHSA-9w4v-9c99-hv7r

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

View original source

05 / REFERENCES

Further evidence