CVE-2019-16202
published 2019-09-10CVE-2019-16202: MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions…
PriorityP336medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
1.32%
67.4th percentile
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| misp-project | misp | < 2.4.115 | 2.4.115 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
MISP up to 2.4.111 __checkLoggedActions privileges management
vuldb·2026-06-23·CVSS 6.5
CVE-2019-16202 [MEDIUM] MISP up to 2.4.111 __checkLoggedActions privileges management
A vulnerability, which was classified as critical, was found in MISP. Impacted is the function __checkLoggedActions. Such manipulation leads to improper privilege management.
This vulnerability is uniquely identified as CVE-2019-16202. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
GHSA
GHSA-mq24-q99r-6fpw: MISP before 2
ghsa_unreviewed·2022-05-24
CVE-2019-16202 [MEDIUM] CWE-269 GHSA-mq24-q99r-6fpw: MISP before 2
MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://excellium-services.com/cert-xlm-advisory/cve-2019-16202/https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560fhttps://github.com/MISP/MISP/compare/v2.4.114...v2.4.115https://excellium-services.com/cert-xlm-advisory/cve-2019-16202/https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560fhttps://github.com/MISP/MISP/compare/v2.4.114...v2.4.115
2019-09-10
Published