CVE-2019-3993

EPSS 45.7%CWE-200

Vexday Risk Score

15Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 45.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

17 dez 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

Produtos afetados

n/a · ELOG

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/https://www.tenable.com/security/research/tra-2019-53