MEDIUM
An issue was discovered in MISP before 2.4.121
Published Feb 11, 2020
5.9
MEDIUMCVSS 3.1
EPSS 1.43%
Description
An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.
Affected products
No data.
- < 2.4.121
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29732 Advisory
- https://github.com/MISP/MISP/commit/934c82819237b4edf1da64587b72a87bec5dd520 x_refsource_MISCPatchThird Party Advisory
- https://github.com/MISP/MISP/commit/c1a0b3b2809b21b4df8c1efbc803aff700e262c3 x_refsource_MISCPatchThird Party Advisory
- https://github.com/MISP/MISP/compare/v2.4.120...v2.4.121 x_refsource_MISCPatchThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29732 | Advisory | |
| https://github.com/MISP/MISP/commit/934c82819237b4edf1da64587b72a87bec5dd520 | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/MISP/MISP/commit/c1a0b3b2809b21b4df8c1efbc803aff700e262c3 | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/MISP/MISP/compare/v2.4.120...v2.4.121 | x_refsource_MISCPatchThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 11, 2020
Updated Aug 4, 2024
Reserved Feb 11, 2020
Link CVE-2020-8891
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-29732 Assigner mitre
Published Feb 11, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-29732