description: A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any authenticated user to view Direct messages without appropriate permissions.
problem types: Privilege Escalation (CAPEC-233)
affected:
{
product: Rocket.chat
vendor: n/a
versions:
status: affected, version: Fixed  in 5.0>
}