CVE-2019-3992: Infoleak
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration data, the attacker may gain access to valid admin usernames and, in older versions of ELOG, passwords.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3992?
CVE-2019-3992 is an information disclosure vulnerability affecting ELOG 3.1.4-57bea22 and below.
What is the severity of CVE-2019-3992?
The severity of CVE-2019-3992 is high, with a severity value of 7.5.
How does CVE-2019-3992 impact ELOG?
CVE-2019-3992 allows remote unauthenticated attackers to access the server's configuration file and gain access to valid admin usernames.
What software versions are affected by CVE-2019-3992?
ELOG 3.1.4-57bea22 and below are affected by CVE-2019-3992.
How can I fix CVE-2019-3992?
There is no specific fix available for CVE-2019-3992, but updating to a patched version of ELOG is recommended.