CVE-2019-3996

2019-12-1721:59:22

CWE-441

tenable

www.cve.org

AI Score

Confidence

High

EPSS

0.019

Percentile

88.5%

JSON

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

CNA Affected

[
  {
    "product": "ELOG",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ELOG 3.1.4-57bea22 and below"
      }
    ]
  }
]

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IN3FP6VXYSD4OMUCFZNOL7MKPWRQFAL/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4IAS4HI24H2ERKBZTDEVJ3LEQEFWYSCT/

www.tenable.com/security/research/tra-2019-53