CVE-2016-8627 MEDIUM

CVE-2016-8627

Vendor [Unknown]
Product admin-cli
Weakness CWE-400
Published May 11, 2018
Last update August 6, 2024

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.

Key dates

02Disclosure timeline

May 11, 2018 CVE published
August 6, 2024 Record updated