PT-2019-14577 · Misp · Misp

Céline Massompierre + 1 · Publicado 2019-09-10 · Atualizado 2019-09-11 · CVE-2019-16202

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.115

Description The issue allows privilege escalation in certain situations. After updating to a fixed version, escalation attempts are blocked by the checkLoggedActions function, which indicates that the issue is related to privilege escalation on older vulnerable versions.

Recommendations For versions prior to 2.4.115, update to version 2.4.115 or later to block privilege escalation attempts.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-16202

Produtos afetados

Misp

Referências · 5

• https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115 · Correção
• https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560f · Correção
• https://excellium-services.com/cert-xlm-advisory/cve-2019-16202 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-16202 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-16202 · Aviso do Fabricante