CVE-2016-6342: High severity red hat fedora vulnerability
Published Aug 29, 2016
·Updated
elog 3.1.1 allows remote attackers to post data as any username in the logbook.
Other sources
It has been reported that one can post from any username entry on the logbook, with a post request and guest readable logbook, using elog 3.1.1.
— Red Hat
Affected Software
2 affected components
Fedoraproject Fedora=24
Elog Project Elog=3.1.1
Event History
Aug 29, 2016
Data Sourced
via Red Hat·11:45 PM
DescriptionSeverityAffected Software
Jun 27, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6342?
CVE-2016-6342 is considered a medium severity vulnerability due to its potential for unauthorized data manipulation.
2
How do I fix CVE-2016-6342?
To fix CVE-2016-6342, upgrade to a patched version of the elog software that addresses this vulnerability.
3
What software versions are affected by CVE-2016-6342?
CVE-2016-6342 affects elog version 3.1.1 and Fedora 24.
4
What are the implications of CVE-2016-6342?
The implications of CVE-2016-6342 include the ability for remote attackers to post messages under any username in the logbook.
5
Can CVE-2016-6342 be exploited remotely?
Yes, CVE-2016-6342 can be exploited remotely, allowing attackers to impersonate users in the system.