PT-2020-20352
CVE-2020-8891
·
تاريخ النشر
2020-02-11
·
تاريخ التحديث
2020-02-14
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
MISP versions prior to 2.4.121
Description
An issue was discovered where usernames were not canonicalized when attempting to block a series of invalid requests, potentially allowing brute-force attacks.
Recommendations
For versions prior to 2.4.121, update to version 2.4.121 or later to resolve the issue. As a temporary workaround, consider implementing additional security measures to detect and prevent brute-force attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾