CVE-2021-25323

Опубликовано: 19 янв. 2021

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password.

Ссылки

https://github.com/MISP/MISP/commit/afbf95a478b6e94f532ca0776c79da1b08be7eed
Patch
Third Party Advisory
https://github.com/MISP/MISP/commit/afbf95a478b6e94f532ca0776c79da1b08be7eed
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:misp-project:misp:2.4.136:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.01323

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-640

Связанные уязвимости

CVE-2021-25323

CVSS3: 9.1

debian

больше 5 лет назад

The default setting of MISP 2.4.136 did not enable the requirements (a ...

GHSA-43qc-6x8c-rggm

CVSS3: 9.1

github

больше 4 лет назад

The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password.

EPSS

Процентиль: 69%

0.01323

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-640