CVE-2018-20226

2018-12-2123:29:00

Google

osv.dev

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

57.1%

JSON

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.

References

github.com/TheHive-Project/Cortex/blob/2.1.3/CHANGELOG.md

github.com/TheHive-Project/Cortex/commit/1aaf2182a6b722ad539e2717bc11967d1bde723a

github.com/TheHive-Project/Cortex/issues/158