CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2017-06-27

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Elog (Elog Project)
• Fedora (Fedoraproject)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1371328
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ZQOPXSMJAJIXH5MRPQS2…