PT-2019-14577 · Misp · Misp

Céline Massompierre + 1 · Published 2019-09-10 · Updated 2019-09-11 · CVE-2019-16202

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.115

Description The issue allows privilege escalation in certain situations. After updating to a fixed version, escalation attempts are blocked by the checkLoggedActions function, which indicates that the issue is related to privilege escalation on older vulnerable versions.

Recommendations For versions prior to 2.4.115, update to version 2.4.115 or later to block privilege escalation attempts.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-16202

Affected Products

Misp

References · 5

• https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115 · Patch
• https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-16202 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16202 · Vendor Advisory
• https://excellium-services.com/cert-xlm-advisory/cve-2019-16202 · Note