Medium WID-SEC-2025-0720 1 CVE

Graylog: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Published Apr 7, 2025 · Updated Apr 7, 2025 · de-DE

Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Graylog ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

GrayLog open source ist eine Log-Management-Lösung.

Vulnerabilities 1

Medium 6.5

CVE-2025-30373

Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value

Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing hea…

Graylog2 graylog2-server org.graylog2:graylog2-server Maven

Apr 7, 2025

Revision history

2025-04-07 #1
Initiale Fassung

References

GitHub Advisory Database vom 2025-04-07
https://github.com/advisories/GHSA-q7g5-jq6p-6wvx
NIST Vulnerability Database vom 2025-04-07
https://nvd.nist.gov/vuln/detail/CVE-2025-30373