Low WID-SEC-2023-2236 1 CVE

Graylog: Schwachstelle ermöglicht Offenlegung von Informationen

Published Aug 30, 2023 · Updated Aug 30, 2023 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Graylog ausnutzen, um Informationen offenzulegen.

Product

GrayLog open source ist eine Log-Management-Lösung.

Vulnerabilities 1

Low 2.6

CVE-2023-41041

User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cach…

Graylog2 graylog2-server org.graylog2:graylog2-server Maven

Aug 30, 2023

Revision history

2023-08-30 #1
Initiale Fassung

References

Graylog Security Advisory vom 2023-08-30
https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-3fqm-frhg-7c85