CVE-2024-46918

CVE-2024-46918 affects MISP prior to 2.4.198. The issue is in app/Controller/UserLoginProfilesController.php where an org admin can view sensitive login fields of another org admin within the same org. Root cause: inadequate access controls on login profile data. Impact: high confidentiality and ...

CVE-2024-46918

app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org...

CVE-2024-8529

creationtimestamp| type| source ---|---|--- 2024-09-12 11:51:16+00:00| seen| https://t.me/cvedetector/5454 2024-09-13 05:01:21+00:00| seen| https://t.me/CyberBulletin/630 2024-09-13 05:21:09+00:00| seen| https://t.me/CyberDilara/873 2024-09-13 05:21:16+00:00| seen| https://t.me/InfoSecInsider/282...

CVE-2024-6678

creationtimestamp| type| source ---|---|--- 2024-09-12 10:08:54+00:00| seen| https://t.me/HackingInsights/12852 2024-09-12 15:18:20+00:00| seen| https://t.me/BleepingComputer/20662 2024-09-12 18:47:39+00:00| seen| https://t.me/thehackernews/5573 2024-09-12 18:59:10+00:00| seen|...

CVE-2024-8522

creationtimestamp| type| source ---|---|--- 2024-09-12 10:08:54+00:00| published-proof-of-concept| https://t.me/HackingInsights/12853 2024-09-12 11:51:18+00:00| seen| https://t.me/cvedetector/5456 2024-09-13 05:01:21+00:00| seen| https://t.me/CyberBulletin/630 2024-09-13 05:21:09+00:00| seen|...

CVE-2024-8253

creationtimestamp| type| source ---|---|--- 2024-09-11 06:58:43+00:00| seen| https://t.me/cvedetector/5326 2024-09-16 19:13:31+00:00| seen| MISP/aaf97b2c-ad16-4ce6-928a-a440112d0fd3...

CVE-2024-8504

creationtimestamp| type| source ---|---|--- 2024-09-10 22:37:05+00:00| seen| https://t.me/cvedetector/5298 2024-09-14 06:31:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8527 2024-09-15 08:46:36+00:00| seen| https://t.me/proxybar/2264 2024-09-15 09:25:24+00:00|...

CVE-2024-43461

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:31+00:00| seen| https://t.me/cvedetector/5292 2024-09-11 04:00:00+00:00| seen|...

CVE-2024-38226

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-38014

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-38217

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-43491

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:11+00:00| seen| https://t.me/cvedetector/5278 2024-09-11 04:00:00+00:00| seen|...

CVE-2024-39205

creationtimestamp| type| source ---|---|--- 2024-09-09 02:35:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8488 2024-10-26 01:04:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8843 2024-10-27 12:18:42+00:00| published-proof-of-concept|...

CVE-2024-8517

creationtimestamp| type| source ---|---|--- 2024-09-06 19:06:41+00:00| seen| https://t.me/cvedetector/4981 2024-09-06 23:16:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8470 2024-09-11 14:58:11+00:00| seen|...

CVE-2024-44000

creationtimestamp| type| source ---|---|--- 2024-09-05 14:18:45+00:00| published-proof-of-concept| https://t.me/WARLOCKDARKARMYOFFICIALS/4554 2024-09-05 16:31:47+00:00| published-proof-of-concept| Telegram/iqzr0evsZIMMy3NnASIGxZl2nBENTlvbGPIFKVphLoM3UsM 2024-09-06 03:57:32+00:00|...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

PT-2024-31669 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions 2.4.196 and earlier Description: The issue concerns improper access restriction to bookmarks data in MISP when the user is not an org admin, specifically within the app/Controller/BookmarksController.php file. Recommendations: F...

CVE-2024-45509

In MISP up to 2.4.196, there is an access control vulnerability in app/Controller/BookmarksController.php that allows non-org-admin users to access bookmarks data. Root cause: insufficient restriction for non-admin users in the BookmarksController. Impact: exposure of bookmarks data with confiden...