medium4.9
CVE-2024-46918
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in…
Impact
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Misp-Project | Misp | before 2.4.198 |