The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...
4.9CVSS5.2AI score0.01075EPSS
SaveExploits0References1
OSV•added 2017/11/25 6:29 p.m.•19 views
CVE-2017-16946
The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...
4.9CVSS6.9AI score
SaveExploits0References1
Cvelist•added 2017/11/25 6:0 p.m.•22 views
CVE-2017-16946
The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...