{"id":"CVE-2018-20226","details":"An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method.","modified":"2026-07-08T18:17:52.171104Z","published":"2018-12-21T23:29:00.853Z","references":[{"type":"ADVISORY","url":"https://github.com/TheHive-Project/Cortex/blob/2.1.3/CHANGELOG.md"},{"type":"FIX","url":"https://github.com/TheHive-Project/Cortex/commit/1aaf2182a6b722ad539e2717bc11967d1bde723a"},{"type":"FIX","url":"https://github.com/TheHive-Project/Cortex/issues/158"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/thehive-project/cortex","events":[{"introduced":"0"},{"fixed":"0b2928f974fa7ed821d8537b6fa4b5604caca453"},{"fixed":"1aaf2182a6b722ad539e2717bc11967d1bde723a"}],"database_specific":{"cpe":"cpe:2.3:a:thehive-project:cortex:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.1.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20226.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}