CVE-2020-12889: MISP-maltego Remote-Transform Vulnerability
Summary
CVE-2020-12889: Maltego incorrectly shares a MISP connection across users in a remote-transform use case. Affects misp-maltego versions < 1.4.5. Fixed in 1.4.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MISP-maltego is a Python package available on PyPI that provides integration between the MISP threat intelligence platform and Maltego, a popular open-source intelligence and forensics application. It allows users to perform remote transforms using MISP data within Maltego. This vulnerability affects MISP-maltego version 1.4.4 and earlier.
Vulnerability Detail
The vulnerability in MISP-maltego version 1.4.4 allows for the incorrect sharing of a MISP connection across users in a remote-transform use case. This means that multiple users can unintentionally access and manipulate the same MISP connection, leading to potential data corruption, unauthorized access, or other security issues. The vulnerability has been assigned a CVSS score of 9.8, indicating its critical severity.
How To Fix
Minimum fixed version
1.4.5
This is the first release that contains the fix.
pip install --upgrade "misp-maltego==1.4.5"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability in MISP-maltego version 1.4.4 and earlier allows for the incorrect sharing of MISP connections in a remote-transform use case. Upgrading to version 1.4.5 or later is crucial to mitigate the risk of data corruption, unauthorized access, and other security issues. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for misp-maltego →
FAQ
MISP-maltego is a Python package that integrates the MISP threat intelligence platform with Maltego, allowing for the use of MISP data within Maltego for open-source intelligence and forensics purposes.
A remote-transform use case refers to the scenario where users perform transforms using MISP data within Maltego, utilizing the MISP-maltego package. This vulnerability specifically affects the sharing of MISP connections in this use case.
The incorrect sharing of MISP connections can lead to data corruption, unauthorized access to sensitive information, or other security issues. It is important to upgrade to the patched version to mitigate these risks.
The CVSS score of this vulnerability is 9.8, indicating its critical severity.
To fix this vulnerability, you should upgrade your MISP-maltego installation to version 1.4.5 or later. This version includes a patch that addresses the incorrect sharing of MISP connections.
