CVE Catalog
CVE-2020-8891
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk1.38%
69th percentile - higher than 69% of all known CVEs
Summary
An issue was discovered in MISP before version 2.4.121, which did not canonicalize usernames when trying to block a brute-force series of invalid requests.
Risk Assessment
The lack of username canonicalization may allow attackers to successfully perform brute-force attacks, potentially leading to user account takeover.
Recommendation
It is recommended to upgrade MISP to version 2.4.121 or later to mitigate this issue.
Original NVD description (English source)
An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.