Medium severity6.5NVD Advisory· Published Sep 10, 2019· Updated Jun 22, 2026

CVE-2019-16202

Description

MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Misp/Misp2 versions
cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*range: <2.4.115
- (no CPE)range: <2.4.115
MISP/MISPdescription

Patches

Vulnerability mechanics

References

github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560fnvdPatchThird Party Advisory
github.com/MISP/MISP/compare/v2.4.114...v2.4.115nvdPatchThird Party Advisory
excellium-services.com/cert-xlm-advisory/cve-2019-16202/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000