PT-2026-117308

CVE-2026-112188

Published

2026-10-19

Updated

2026-10-19

Description by

CVSS 4.0

7.1

High

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.48

Description A flaw in the server settings lookup mechanism allows authenticated users to retrieve sensitive configuration data that should be redacted. The settings lookup function resolves dotted setting names to nodes in a configuration tree; however, providing a branch name (such as Security, MISP, or Plugin) instead of a specific leaf setting causes the function to return the entire sub-tree. Since branch nodes lack a redaction flag, the redaction check in the settings retrieval endpoint is bypassed. This exposes sensitive information, including the security salt, Redis connection passwords, and plugin API keys. Additionally, an endpoint used to edit server settings similarly returns the entire configuration store when a branch name is resolved.

Recommendations Update to version 2.5.48 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Iglocska

Jeroen Pinoy

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor