CVE-2020-14969
22.06.2020, 12:15
app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.Enginsight
| Vendor | Product | Version |
|---|---|---|
| misp | misp | 2.4.127 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration