Security Advisory

CVE-2019-9482

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-01 05:00:00

Last updated 2024-08-04 21:54:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).

← Browse all CVEs View on cve.org ↗