CyberRota Analysis
AI-GeneratedAffected versions of MISP (up to 2.5.45) have a vulnerability in their API authentication failure logging mechanism, allowing certain types of failed authentication attempts to bypass logging controls. This inconsistency can lead to excessive logging of authentication failures, potentially obscuring legitimate security events and complicating incident response efforts. Organizations using these versions should prioritize remediation to enhance their logging integrity and maintain effective security monitoring.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model: - API requests with no authentication key; - requests supplying an API key with an incorrect length Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry. Version affected: ≤2.5.45