Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-09866
HistoryFeb 22, 2024 - 12:00 a.m.

Graylog Authorization Issues Vulnerability

2024-02-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
graylog
authorization
vulnerability
cookie injection
authentication bypass
log management

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.3%

Graylog is a centralized log management solution from Graylog USA. The product supports capturing, storing and analyzing logs in real time, among other things. Graylog has an authorization issue vulnerability that stems from the presence of a cookie injection vulnerability. A remote attacker could exploit this vulnerability to cause authentication bypass.

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.3%