He Wei（ギカク)

**Name of the Vulnerable Software and Affected Versions** MISP (affected versions not specified) **Description** An improper authorization issue allows an authenticated organization administrator to access or modify user settings of site administrator accounts within the same organization. This occurs because access-control checks scoped administrative actions by organization membership but failed to exclude higher-privileged site administrator users, allowing a breach of the privilege boundary between organization and site-wide administration. This could lead to the unauthorized viewing or alteration of site administrator user settings and login profile information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.