CVE-2019-3993
High · 7.5CVSS
7.5
EPSS
45.7%
Published
Dec 17, 2019
CISA due date
—
The record
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | elog | 0 | No fix |
| Ubuntu:18.04:LTS | elog | 0 | No fix |
| Ubuntu:20.04:LTS | elog | 0 | No fix |
| Ubuntu:22.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | elog | 0 | No fix |
Related vulnerabilities
- CVE-2019-3995 ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a… Also affects elog
- CVE-2026-81330 The C6 ear camera transmits live video to the EarVision Android application over… CWE-319
- CVE-2026-87482 Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS… CWE-319
- CVE-2026-79588 U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of… CWE-319
- CVE-2026-71216 PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. CWE-319
- CVE-2026-84381 HTTPX2 is a next generation HTTP client for Python. CWE-319
- CVE-2026-84366 Scrapy is a high-level web crawling and scraping framework for Python. CWE-319
- CVE-2026-73756 A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated… CWE-319