CVE-2024-46918

The MISP open source cybersecurity threat intelligence platform is vulnerable to an incorrect authorization flaw (CWE-863) in versions prior to 2.4.198 . The issue exists within the app/Controller/UserLoginProfilesController.php component, which fails to prevent an organization administrator from...

CVE-2024-46918: Incorrect Authorization

app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org...