CVE-2020-5626

Summary

Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arbitrary OS commands via a specially crafted log file.

Affected Software

VendorProductVersion RangeStatus
Infoscience CorporationLogstorage and ELC AnalyticsLogstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlieraffected

Weaknesses

  • OS Command Injection

ADP Enrichment

CVE Program Container

Additional References

References