CVE-2019-12794

An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins organization admins have the inherent ability to reset passwords for all of their organization's users. This, however, could be abused in a situation where the host organization of an instance...

PT-2019-12947

Name of the Vulnerable Software and Affected Versions MISP version 2.4.108 Description An issue was discovered where organization admins could reset credentials for site admins, potentially allowing them to impersonate site admins by manually setting their password or using their API key. This...