Описание
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
Ссылки
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.4.115 (исключая)
cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00227
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
EPSS
Процентиль: 45%
0.00227
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-269