elhoim (David André)

MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials

MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter

MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlations

MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks