PT-2020-12624
CVE-2020-11458
·
تاريخ النشر
2020-04-02
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MISP versions prior to 2.4.124
Description
The issue allows administrators to choose arbitrary files for ingestion by MISP, leading to potential leaks of specific string patterns. These leaks can include passwords from database.php or GPG key passphrases from config.php.
Recommendations
For versions prior to 2.4.124, update to version 2.4.124 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾