CVE-2019-3993

Опубликовано: 17 дек. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:elog_project:elog:*:*:*:*:*:*:*:*

Версия до 3.1.4-57bea22 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11612

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

CWE-319

Связанные уязвимости

CVE-2019-3993

CVSS3: 7.5

ubuntu

около 6 лет назад

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

GHSA-7hmp-m42w-c587

github

больше 3 лет назад

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

EPSS

Процентиль: 93%

0.11612

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

CWE-319