CVE-2020-8890

Published: Feb 12, 2020Modified: Jun 22, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of invalid requests.

Affected (1)

Products: Misp Project: Misp

Misp Project

1 product

Misp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Misp Project Misp	Before 2.4.121

Related CWEs

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (6)

https://github.com/MISP/MISP/commit/934c82819237b4edf1da64587b72a87bec5dd520

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/MISP/MISP/commit/c1a0b3b2809b21b4df8c1efbc803aff700e262c3

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/MISP/MISP/compare/v2.4.120...v2.4.121

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/MISP/MISP/commit/934c82819237b4edf1da64587b72a87bec5dd520

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/MISP/MISP/commit/c1a0b3b2809b21b4df8c1efbc803aff700e262c3

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/MISP/MISP/compare/v2.4.120...v2.4.121

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.