PT-2019-16837 · Elog · Elog

CVE-2019-3996

·

Publicado

2019-12-17

·

Atualizado

2023-02-01

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ELOG versions 3.1.4-57bea22 and below
Description The issue allows unauthenticated remote attackers to use the software as an HTTP GET request proxy by sending crafted HTTP POST requests.
Recommendations For versions 3.1.4-57bea22 and below, consider restricting access to the HTTP POST request handling functionality until a fix is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-610CWE-441

Identificadores relacionados

CVE-2019-3996

Produtos afetados

Elog