CVE-2020-12889: Critical severity misp - malware information sharing platform vulnerability

Published May 15, 2020

Updated

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.

Affected Software

1 affected component

Misp MISP-maltego=1.4.4

Remediation

Patch Available

https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b

Event History

May 15, 2020

CVE Published

via MITRE·05:53 PM

Data Sourced

via MITRE·05:53 PM

Description

Frequently Asked Questions

What is CVE-2020-12889?

CVE-2020-12889 is a vulnerability in MISP MISP-maltego 1.4.4 that incorrectly shares a MISP connection across users in a remote-transform use case.

What is the severity of CVE-2020-12889?

The severity of CVE-2020-12889 is critical with a CVSS score of 9.8.

How does CVE-2020-12889 impact MISP MISP-maltego 1.4.4?

CVE-2020-12889 allows an attacker to improperly share a MISP connection across users, leading to potential unauthorized access to MISP data.

How can I fix CVE-2020-12889?

To fix CVE-2020-12889, upgrade MISP MISP-maltego to version 1.4.4 or later, as it includes the necessary fix for this vulnerability.

Where can I find more information about CVE-2020-12889?

More information about CVE-2020-12889 can be found at the following reference: https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b