CVE-2019-3993: Infoleak
Published Dec 17, 2019
·Updated
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.
Affected Software
3 affected components
Elog Project Elog<=3.1.4-57bea22
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Event History
Dec 17, 2019
CVE Published
via MITRE·09:59 PM
Data Sourced
via MITRE·09:59 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-3993?
CVE-2019-3993 is an information disclosure vulnerability affecting ELOG 3.1.4-57bea22 and below.
2
How does the vulnerability in CVE-2019-3993 work?
The vulnerability allows a remote unauthenticated attacker to recover a user's password hash by sending a crafted HTTP POST request.
3
Which software versions are affected by CVE-2019-3993?
ELOG 3.1.4-57bea22 and below are affected by this vulnerability.
4
What is the severity of CVE-2019-3993?
The severity of CVE-2019-3993 is high with a CVSS score of 7.5.
5
How can I fix CVE-2019-3993?
There is no official patch or update available for this vulnerability at the moment. We recommend implementing mitigations and monitoring for any potential exploitation.