3 matches found
CVE-2021-27904
An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...
6.8CVSS0.0029EPSS
SaveExploits0References1
CVE-2021-27904: Undefined Security Weakness
An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...
5.5CVSS5.8AI score0.0029EPSS
SaveExploits0References3
PT-2021-17658
Name of the Vulnerable Software and Affected Versions: MISP version 2.4.139 Description: An issue was discovered in the implementation of Sharing Groups, where the all org flag sometimes provided view access to unintended actors. This occurred due to a problem in the...
5.5CVSS0.0029EPSS
SaveExploits0References6
20