← Database

CVE-2024-46918

MEDIUM CVSS: 4.9 Published: 2024-09-15 Modified: 2026-06-22

Description

app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.

Affected Platforms

Misp-Project Misp

Weakness Type

CWE-863, CWE-863

References