CVE-2019-9482

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for

published March 1, 2019

CVSS
—
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.1th percentile
Published
2019-03-01T05:00Z
EPSS history
Timeline
  • 01 MAR 05:00Z
    In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for
    cvelistv5