CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

PT-2017-13399

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.80 Description The issue arises when MISP is configured with X.509 certificate authentication in conjunction with an external user management ReST API. If this API returns an empty value for an external user providin...