An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.
References
Link | Resource |
---|---|
https://github.com/TheHive-Project/Cortex/blob/2.1.3/CHANGELOG.md | Third Party Advisory |
https://github.com/TheHive-Project/Cortex/commit/1aaf2182a6b722ad539e2717bc11967d1bde723a | Patch Third Party Advisory |
https://github.com/TheHive-Project/Cortex/issues/158 | Issue Tracking Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2018-12-21 23:29
Updated : 2024-02-28 16:48
NVD link : CVE-2018-20226
Mitre link : CVE-2018-20226
CVE.ORG link : CVE-2018-20226
JSON object : View
Products Affected
thehive-project
- cortex
CWE