Vulnerability Details CVE-2020-14969
app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 66.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2020-14969
-
cpe:2.3:a:misp-project:misp:2.4.127