CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Privilege Management
Summary: misp before 2.4.115 allows privilege escalation in certain situations. after updating to 2.4.115, escalation attempts are blocked by the __checkloggedactions function with a "this could be an indication of an attempted privilege escalation on older vulnerable versions of misp (<2.4.115)" message.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-09-10
Last Modified Date: 2019-09-11