Security Advisory

CVE-2017-16946

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-25 18:00:00

Last updated 2024-08-05 20:43:57

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to discover a hashed password by reading the audit log.

← Browse all CVEs View on cve.org ↗