PT-2021-19486 · Adiscon · Loganalyzer

Michael Strametz · Published 2021-06-08 · Updated 2021-06-11 · CVE-2021-31738

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adiscon LogAnalyzer versions 4.1.10 through 4.1.11

Description The issue allows for XSS in the login.php file.

Recommendations For versions 4.1.10 and 4.1.11, consider disabling access to the login.php file until a fix is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-31738

Affected Products

Loganalyzer

References · 7

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-024.txt · Exploit
• https://cve.org/CVERecord?id=CVE-2021-31738 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-31738 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31738 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31738 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-31738 · Vendor Advisory
• https://t.me/cvenotify/15816 · Telegram Post