Beveiligingsadvies

CVE-2025-64349

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-31 18:31:42

Laatst bijgewerkt 2025-12-02 14:55:52

Toegewezen door cisa-cg

CVSS-score 8.8

Status PUBLISHED

Beschrijving

ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not configured to allow self-registration.

← Alle CVE's bekijken Bekijk op cve.org ↗