CVE-2025-64348
ELOG configuration file authorization bypass
Summary
ELOG configuration file authorization bypass
Original description
The description as published by the source.
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow shell commands or self-registration.
References
- advisory github.com
- advisory nvd.nist.gov
- patch bitbucket.org
- patch bitbucket.org
- web raw.githubusercontent.com
- web cve.org