An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.
Link | Tags |
---|---|
https://mattermost.com/security-updates/ | vendor advisory |