Vulnerabilities > CVE-2020-8859 - NULL Pointer Dereference vulnerability in PSI Electronic Logbook 3.1.4283534D
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HTTP parameters. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition. Was ZDI-CAN-10115.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |