CVE-2017-20021

CVE-2017-20021 affects Solare Solar-Log versions 2.8.4-56 and 3.5.2-85, with a vulnerability in the File Upload component that enables privilege escalation. The issue is exploitable remotely/over the network, per connected records, and upgrading to version 3.5.3-86 mitigates the flaw (addressed b...

CVE-2017-20020 Solare Solar-Log cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to...

CVE-2017-20020 Solare Solar-Log cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to...

CVE-2017-20020

CVE-2017-20020 affects Solar-Log: versions 2.8.4-56 and 3.5.2-85 contain a cross-site request forgery (CSRF) vulnerability. The flaw arises from lack of proper data filtering/escaping in a (unspecified) functionality, enabling remote exploitation. Upgrading to version 3.5.3-86 mitigates the issue...

CVE-2017-20019 Solare Solar-Log Config information disclosure

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-...

CVE-2017-20019 Solare Solar-Log Config information disclosure

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-...

CVE-2017-20019

CVE-2017-20019 affects Solare Solar-Log firmware versions 2.8.4-56 and 3.5.2-85, where an unknown function in the Config Handler can be manipulated to disclose information. The vulnerability enables remote exploitation with no authentication and no user interaction, leading to information disclos...