Unscored CVE-2018-20226 EUVD-2018-12793GHSA-8mgg-hrv5-mfvw

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.t…

Published Dec 21, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.

References

https://github.com/TheHive-Project/Cortex/commit/1aaf2182a6b722ad539e2717bc11967d1bde723a
https://github.com/TheHive-Project/Cortex/issues/158
https://github.com/TheHive-Project/Cortex/blob/2.1.3/CHANGELOG.md