PT-2020-20352
CVE-2020-8891
·
Published
2020-02-11
·
Updated
2020-02-14
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
MISP versions prior to 2.4.121
Description
An issue was discovered where usernames were not canonicalized when attempting to block a series of invalid requests, potentially allowing brute-force attacks.
Recommendations
For versions prior to 2.4.121, update to version 2.4.121 or later to resolve the issue. As a temporary workaround, consider implementing additional security measures to detect and prevent brute-force attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾