CVE-2026-65311 - The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit logging, potentially concealing other activity on the system. - 漏洞详情

漏洞编号：CVE-2026-65311

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-65311

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-284

发布/更新时间：2026-07-31 / 2026-08-28

漏洞描述

The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA)
in affected versions exposes an undocumented endpoint that changes
the server's logging level and target without requiring
authentication. A remote, unauthenticated attacker with network
access to the service may suppress audit logging, potentially
concealing other activity on the system.

漏洞描述

相关链接

相关漏洞