CVE-2025-64348: ELOG configuration file authorization bypass
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow shell commands or self-registration.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64348?
CVE-2025-64348 is considered a high severity vulnerability due to its potential to allow unauthorized modification of configuration files and execution of operating system commands.
How do I fix CVE-2025-64348?
To fix CVE-2025-64348, update ELOG to the latest version where the vulnerability has been patched.
Who is affected by CVE-2025-64348?
CVE-2025-64348 affects authenticated users of ELOG who have permissions to modify the configuration file.
What types of attacks can be performed using CVE-2025-64348?
Using CVE-2025-64348, an attacker can cause denial of service or execute arbitrary OS commands if the execute facility is enabled.
Is there a workaround for CVE-2025-64348?
A potential workaround for CVE-2025-64348 is to disable the execute facility by avoiding the use of the "-x" command line flag.