Unrated severityNVD Advisory· Published Jul 5, 2019· Updated Aug 5, 2024

CVE-2018-16386

Description

An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection (and an arbitrary log filename) can be achieved via the PATH_INFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SWIFT/SWIFT Alliance Web Platformdescription
Swift/Alliance Web Platformllm-create
Range: = 7.1.23

Patches

Vulnerability mechanics

References

gist.github.com/shiham101/8763642e768582e0182f92cd41c482ecmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000