CVE-2017-20019 — Solare Solar-Log Config information disclosure

Description (CNA)

A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

Affected (CNA)

Vendor / product	Versions
Solare / Solar-Log	affected 2.8.4-56; affected 3.5.2-85

CWE

CWE-200

References

http://seclists.org/fulldisclosure/2017/Mar/58
https://vuldb.com/?id.98929

ADP enrichment

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2017/Mar/58
https://vuldb.com/?id.98929

CISA-ADP

No English description supplied.

No references supplied.