CVE-2025-64695

概要

参考情報

• jvn.jp/en/jp/JVN77560819 · Third Party Advisory
• logstare.com/vulnerability/2025-001 · Vendor Advisory

logstare collector のその他の脆弱性

• CVE-2025-64299低 2.7LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.
• CVE-2025-62687中 6.9Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations ma…
• CVE-2025-62189中 5.3LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create…
• CVE-2025-61949中 4.8LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitra…
• CVE-2025-58097高 7.8The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate f…