Description
app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.
Advisories 1
- WID-SEC-2024-2143 MISP: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 15, 2024