Information Disclosure Vulnerability in MISP by The MISP Project
CVE-2022-42724

4.3MEDIUM

Key Information:

Vendor

Misp-project

Status
Malware Information Sharing Platform
Vendor
CVE Published:
10 October 2022

What is CVE-2022-42724?

The vulnerability in MISP allows unauthorized access to sensitive role names through improper access control in the UsersController. This exposure could lead to a security breach by revealing information that should only be accessible to site administrators, thereby increasing the risk of targeted attacks and unauthorized user actions.

References

https://github.com/MISP/MISP/commit/934b9cd4fc6d6378ad349...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.