CVE Catalog
CVE-2020-8890
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk1.06%
60th percentile - higher than 60% of all known CVEs
Summary
An issue was discovered in MISP before version 2.4.121 that mishandled time skew between the web server and the database, potentially leading to ineffective protection against brute-force attacks.
Risk Assessment
Organizations may be vulnerable to brute-force attacks, which could result in unauthorized access to the system.
Recommendation
It is recommended to update MISP to version 2.4.121 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of invalid requests.