ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow shell commands or self-registration.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 31 Oct 2025 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow shell commands or self-registration. | |
| Title | ELOG configuration file authorization bypass | |
| Weaknesses | CWE-862 | |
| References |
|
|
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: cisa-cg
Published:
Updated: 2025-10-31T18:31:21.412Z
Reserved: 2025-10-30T20:40:29.749Z
Link: CVE-2025-64348
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-31T19:15:51.610
Modified: 2025-10-31T19:15:51.610
Link: CVE-2025-64348
Redhat
No data.
OpenCVE Enrichment
No data.