Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-2564
CVE-2025-2564:
Chainguard vulnerability analysis and mitigation
Overview
A vulnerability has been identified in Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, and 9.11.x <= 9.11.9, tracked as CVE-2025-2564. The vulnerability relates to improper enforcement of the 'Allow users to view/update archived channels' System Console setting (NVD).
Technical details
The vulnerability is classified as an incorrect authorization issue (CWE-863) with a CVSS v3.1 Base Score of 4.3 (Medium). The vulnerability vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, indicating network accessibility, low attack complexity, required privileges, no user interaction, and low confidentiality impact (NVD).
Impact
When exploited, this vulnerability allows authenticated users to view members and member information of archived channels even when the 'Allow users to view/update archived channels' setting is disabled in the System Console (NVD).
Exploitability
The vulnerability requires authenticated access to exploit, with low attack complexity. No known active exploits have been reported in the wild (NVD).
Additional resources
Source: This report was generated using AI
Related Chainguard vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management