CVE-2019-3993CWE-200

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability

published December 17, 2019

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.45698 · 98.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-12-17T21:59Z
EPSS history
Timeline
  • 17 DEC 21:59Z
    ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability
    cvelistv5