Undefined threat level from MISP events becomes severity "4"

[srilumpa]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Debian Strech
TheHive version / git hash	2.12.1 / commit 8300fcc
Package Type	Docker, From source

Problem Description

When an event with an "Undefined" threat level is imported from MISP to TheHive, the created case sees its severity set to "4". This value can be seen as "4" in the "Statistics" panel and is displayed as a question mark ("?") over a blue background in the case detail view.

Steps to Reproduce

1. Create a MISP event with an undefined threat level
2. Import the MISP event to TheHive

Possible Solutions

• Add an "Unknown/Undefined" severity in TheHive
• Add the possibility to set up in the connector configuration a default severity to be used when no threat level is defined in the MISP event

Complementary information

With commit 6c4489d, the setup severity will now be "0" instead of the current "4".