CVE-2019-3993

2019-12-1721:59:00

CWE-200

tenable

www.cve.org

7.4 High

AI Score

Confidence

High

0.077 Low

EPSS

Percentile

94.2%

JSON

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user’s password hash by sending a crafted HTTP POST request.

CNA Affected

[
  {
    "product": "ELOG",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ELOG 3.1.4-57bea22 and below"
      }
    ]
  }
]