PT-2024-35346 · Graylog · Graylog

Dennisoelkers · Published 2024-11-18 · Updated 2025-11-03 · CVE-2024-52506

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Graylog versions 6.1.0 through 6.1.1

Description Graylog is a log management platform. The reporting functionality allows the creation and scheduling of reports containing dashboard widgets displaying log messages or aggregated metrics. A flaw exists where multiple concurrent report rendering requests from authorized users can lead to information leakage. When multiple reports are requested simultaneously, the headless browser instance used for PDF rendering is reused. Depending on timing, this can result in an error or allow one user to access another user's report, potentially exposing indexed log messages or aggregated data they should not have access to.

Recommendations Graylog version 6.1.2 resolves this issue. Upgrade to version 6.1.2 or later. As a temporary measure, disable the reporting functionality.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-52506

GHSA-VGGM-3478-VM5M

Affected Products

Graylog

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52506.json · Exploit
• 🔥 https://vicarius.io/vsociety/posts/cve-2024-52506-mitigate-graylog-vulnerability · Exploit
• 🔥 https://vicarius.io/vsociety/posts/cve-2024-52506-detect-graylog-vulnerability · Exploit
• https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-vggm-3478-vm5m · Patch
• https://osv.dev/vulnerability/CVE-2024-52506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52506 · Security Note
• https://osv.dev/vulnerability/GHSA-vggm-3478-vm5m · Vendor Advisory
• https://github.com/Graylog2/graylog2-server · Note
• https://twitter.com/CVEnew/status/1858611255776604643 · Twitter Post
• https://t.me/cvedetector/11388 · Telegram Post
• https://t.me/cveNotify/141404 · Telegram Post