VULNERABILITY INTELLIGENCE

CVE-2019-9482

CVSS score5.3 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2019-03-01
Last modified2026-06-22
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).

Weakness classification

  • CWE-862: Missing Authorization

Primary references