CVE-2021-37760

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-37760

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-37760

Published

2021-07-31T18:15:07.887Z

Modified

2026-03-14T11:04:17.812809Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

References

Affected packages

Type

GIT

Repo

https://github.com/graylog2/graylog2-server

Events

Introduced

Fixed

Database specific

{
    "versions": [
        {
            "introduced": "2.1.1"
        },
        {
            "fixed": "4.1.2"
        }
    ]
}

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37760.json"