Not rated
CVE-2019-3992 ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability
Description
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usernames and, in older versions of ELOG, passwords.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ELOG | Versions not published |
Other CVEs of ELOG
The 5 CVEs of ELOG →
CVE-2019-3996
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted…
Not rated
CVE-2019-3995
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference
Not rated
CVE-2019-3994
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free
Not rated
CVE-2019-3993
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability
Not rated