Executive Summary

This vulnerability is an incorrect authorization issue in MISP that allows an organization administrator to target site administrator accounts within the same organization using the administrative email functionality.

Although the code restricted organization administrators to users within their own organization, it failed to exclude accounts with the site administrator role from recipient queries.

As a result, an organization administrator could perform privileged actions, such as initiating a password reset, on a higher-privileged site administrator account in the same organization.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an organization administrator to escalate privileges by targeting site administrator accounts within the same organization, potentially leading to full compromise of the MISP instance's confidentiality, integrity, and availability.

Such a compromise could impact compliance with common standards and regulations like GDPR and HIPAA, which require strict controls over access to sensitive data and administrative functions to protect personal and health information.

By enabling unauthorized privilege escalation and potential account takeover, the vulnerability increases the risk of unauthorized data access or modification, which could result in violations of these regulatory requirements.

Useful 0 Not Useful 0

Impact Analysis

If exploited successfully, an authenticated organization administrator could interfere with or potentially take over a site administrator account.

This leads to privilege escalation and full compromise of the MISP instance’s confidentiality, integrity, and availability.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, apply the patch that modifies the admin_email function in the UsersController.php file of MISP.

The patch prevents organization administrators from targeting site administrator accounts by excluding site admin roles from recipient queries during email reset operations.

This ensures that organization admins cannot perform privileged account-management actions, such as initiating password resets, against site admin accounts within the same organization.

Useful 0 Not Useful 0