PT-2023-26772 · Strangebee · Thehive

Name of the Vulnerable Software and Affected Versions: StrangeBee TheHive versions 4.1.21 through 5.0.8 Cortex version 3.1.6 Description: An issue in the software allows a remote attacker to gain privileges via the Active Directory authentication mechanism. Recommendations: For StrangeBee TheHive...

TheHive Authorization Issues Vulnerability

TheHive is a scalable open source security incident response platform. A security vulnerability exists in StrangeBee TheHive that stems from a vulnerability that allows an attacker to gain privileges through the Active Directory authentication mechanism. Affected products and versions: StrangeBee...

CVE-2023-39069

An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism...

CVE-2023-39069

The CVE-2023-39069 entry affects StrangeBee TheHive and Cortex components: TheHive versions 4.1.21–5.0.8 and Cortex 3.1.6. The issue enables a remote attacker to gain privileges via the Active Directory authentication mechanism. All sources describe a privilege escalation through AD auth, but no ...