Vulnerabilities

TI-2021-15286 CVE-2021-37234 · GHSA-w4rj-xpvg-fx9q

Incorrect Access Control vulnerability in Modern Honey Network commit…

HIGH 68

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00387 Published 2023-02-03 No fix listed CWE-352

TI-2020-17557 CVE-2020-29069 · GHSA-c788-7228-4w94

_get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through…

LOW 25

_get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through 2020-11-23 allows attackers to cause a denial-of-service via an IP address that is absent from a local geolocation database, because th…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00333 Published 2020-11-24 No fix listed

Vulnerabilities

Filters

Incorrect Access Control vulnerability in Modern Honey Network commit…

_get_flag_ip_localdb in server/mhn/ui/utils.py in Modern Honey Network (MHN) through…