MISP Improper Access Control Vulnerability in Authentication Key Reset Allows Privilege Escalation

A vulnerability in MISP prior to version 2.5.37 allows organization administrators to improperly access and reset authentication keys of site administrators within the same organization. This lack of access control meant that an organization administrator could obtain a new authentication key for a site administrator account and use it to escalate privileges. The vulnerability has been addressed by restricting non-site administrators from accessing or resetting authentication keys for site administrators.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an organization administrator to gain elevated rights by accessing site administrator authentication keys.

Remediation

Users can upgrade to MISP version 2.5.37 or later to address this vulnerability.