Non notée
CVE-2019-3992 ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability
Description
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usernames and, in older versions of ELOG, passwords.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ELOG | Versions non publiées |
Autres CVE de ELOG
Les 5 CVE de ELOG →
CVE-2019-3996
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted…
Non notée
CVE-2019-3995
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference
Non notée
CVE-2019-3994
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free
Non notée
CVE-2019-3993
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability
Non notée