CVE-2021-37760

9.8

CRITICALCVSS v3

Published

July 31, 2021

CVSS v2

7.5 HIGH

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

Docker HubOfficial Graylog Docker image (automated build)

>= 2.1.1, < 4.1.2NVD

Python Package Index

>= 2.1.1, < 4.1.2NVD

NPM

Graylog2 client library for node.js

>= 2.1.1, < 4.1.2NVD