CVEvulnerability

CVE-2019-9482

5.3 MEDIUM Published 2019-03-01 Modified 2026-06-22 Official page ↗
Status
Modified
Published
2019-03-01
Last modified
2026-06-22
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-862

Description

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).

Affected configurations

• misp-project misp 2.4.102

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References