CVE-2017-16946

CVE-2017-16946 describes a vulnerability in MISP version 2.4.82 where the admin_edit function in UsersController.php improperly handles the enable_password field. This flaw allows authenticated administrators to discover a hashed password by reviewing the audit log, leading to a potential information disclosure. The vulnerability has a CVSS score of 4.9 (Medium), indicating a network-based attack with low complexity, requiring high privileges to exploit, and resulting in high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.