CVE-2019-3992

CVE-2019-3992 is an information disclosure vulnerability affecting ELOG 3.1.4-57bea22 and earlier versions, as well as specific Fedora Project ELOG distributions. A remote, unauthenticated attacker can exploit this by sending an HTTP GET request to access the server's configuration file, potentially revealing valid admin usernames and, in older versions, passwords. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a high impact on confidentiality with low attack complexity and no authentication required. There is currently no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.