4 matches found
CVE-2024-46918: Incorrect Authorization
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org...
PT-2024-32282
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.198 Description The issue concerns a flaw in the app/Controller/UserLoginProfilesController.php file, which allows an org admin to view sensitive login fields of another org admin within the same organization...
CVE-2024-46918
The MISP open source cybersecurity threat intelligence platform is vulnerable to an incorrect authorization flaw (CWE-863) in versions prior to 2.4.198 . The issue exists within the app/Controller/UserLoginProfilesController.php component, which fails to prevent an organization administrator from...
