VYPR
← All advisories
Medium severity5.3OSV Advisory· Published Mar 1, 2019· Updated Jun 22, 2026

CVE-2019-9482

CVE-2019-9482

Description

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Misp/MispOSV3 versions
    v0.2, v2.3.0, v2.4.0, …+ 2 more
    • (no CPE)range: v0.2, v2.3.0, v2.4.0, …
    • cpe:2.3:a:misp-project:misp:2.4.102:*:*:*:*:*:*:*
    • (no CPE)range: <2.4.102

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.