CVE-2021-37760

Description

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).

Affected Platforms

Weakness Type

CWE-532

References

• https://www.graylog.org/post/announcing-graylog-v4-1-2
• https://www.graylog.org/post/announcing-graylog-v4-1-2