Description
The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to discover a hashed password by reading the audit log.
Unscored
CVE-2017-16946
EUVD-2017-8115GHSA-prrm-fv2r-3vwp
The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to d…
Published Nov 25, 2017 · Updated Aug 5, 2024 · Assigned by mitre