CVE-2025-64348
ELOG configuration file authorization bypass
Résumé
ELOG configuration file authorization bypass
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow shell commands or self-registration.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch bitbucket.org
- patch bitbucket.org
- web raw.githubusercontent.com
- web cve.org