Home  >  CVE-2023-24028
CVE Details for CVE: CVE-2023-24028
Summary
In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function.
Timestamps
Last major update 27-01-2023 - 14:29
Published 20-01-2023 - 22:15
Last modified 27-01-2023 - 14:29
References
Vulnerable Configurations
  • cpe:2.3:a:misp-project:misp:2.4.167:*:*:*:*:*:*:*
    cpe:2.3:a:misp-project:misp:2.4.167:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
None
Impact
Exploitability
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
CVSS3
Base
9.8
Impact
5.9
Exploitability
3.9
Access
Attack ComplexityAttack vectorPrivileges RequiredScopeUser Interaction
LOW NETWORK NONE UNCHANGED NONE
Impact
ConfidentialityIntegrityAvailability
HIGH HIGH HIGH
VIA4 references
cvss3-vector via4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H