CVE-2021-31954

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-31954

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2021-31954

CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...

CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2021-31954: Improper Privilege Management

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

PT-2021-3301 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the Windows Common Log File System CLFS driver, which can allow an attacker to elevate their...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2021-31954)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Windows Common Log File System Driver Permission and Access Control Vulnerabilities

Microsoft Windows is a desktop operating system from the U.S. company Microsoft. A security vulnerability exists in the Windows Common Log File System Driver. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based...

CVE-2021-22516

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager SAPIM product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file...

Design/Logic Flaw

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager SAPIM product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file...

CVE-2021-22516

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager SAPIM product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file...

CVE-2021-22516

CVE-2021-22516 affects Micro Focus Secure API Manager (SAPIM) 2.0.0. It is described as an Information Disclosure vulnerability where sensitive information could be written into log files due to an insertion issue in the logging process. NVD lists CVSSv3.1 base score 7.5 (Network attack, Low comp...

CVE-2021-22516

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager SAPIM product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file...

CVE-2021-22516: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager SAPIM product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file...

SuiteCRM Log File Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SuiteCRM Log File Remote Code Execution', 'Description' = %q This module exploits an input validation error on the log file extension parameter. ...

Vulnerability fixed in Red Hat Enterprise Linux

Red Hat has fixed a vulnerability in the Public Key Infrastructure PKI Core package. A component of this package writes out the administrator password during installation to a log file that is unjustifiably readable by any local user. A local malicious person with knowledge of the location of thi...