CVE-2019-9482
published 2019-03-01CVE-2019-9482: In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received…
PriorityP426medium5.3CVSS 3.0
AVNACHPRLUINSUCHINAN
EPSS
0.74%
50.0th percentile
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| misp-project | misp | — | — |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
MISP 2.4.102 Settings information disclosure
vuldb·2026-06-23·CVSS 5.3
CVE-2019-9482 [MEDIUM] MISP 2.4.102 Settings information disclosure
A vulnerability, which was classified as problematic, was found in MISP 2.4.102. This impacts an unknown function of the component Settings. Such manipulation leads to information disclosure.
This vulnerability is traded as CVE-2019-9482. The attack may be launched remotely. There is no exploit available.
GHSA
GHSA-55m3-vx37-fcvx: In MISP 2
ghsa_unreviewed·2022-05-13
CVE-2019-9482 [MEDIUM] CWE-862 GHSA-55m3-vx37-fcvx: In MISP 2
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).
No detection rules found.
No writeups or analysis indexed.
2019-03-01
Published