CVE-2019-3993 - AskarLabs CVE Database

CVE-2019-3993

Vendor N/A

Product ELOG

Weakness CWE-200 · Info exposure

Published December 17, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.

Key dates

02Disclosure timeline

December 17, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3993 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2021-20993 WAGO: Managed Switches: Exposure of sensitive information through directory listing CVE-2023-45189 IBM Robotic Process Automation information disclosure CVE-2026-42873 WeGIA: Error Handling Upload DocDependente CVE-2025-12148 Unauthorized access to fields protected by Field Masking (FM) for fields of type IP CVE-2023-32681 Unintended leak of Proxy-Authorization header in requests