CVE-2019-16202

medium

Description

MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.

References

Advisories

https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115

https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560f

https://excellium-services.com/cert-xlm-advisory/cve-2019-16202/

Details

Source: Mitre, NVD

Published: 2019-09-10

Updated: 2026-06-22

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.0024