PatchTheCVEcitilog vulnerabilities
Recent CVEs affecting citilog products. 2 tracked.
citilog has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-07-21. Highest priority: CVE-2022-28860 (score 40/100).
- CVE-2022-28861 MEDIUM 5.9 DOWNGRADE The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart
- CVE-2022-28860 MEDIUM 5.9 DOWNGRADE An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position b
FAQ
How do I fix citilog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is citilog being exploited right now?
None of the tracked citilog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which citilog CVE should I patch first?
CVE-2022-28860 currently ranks highest (40/100): An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position b.