CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.5. It may be remotely exploitable.
CVE
CVE-2008-5617
Severity
HIGH
CVSS
8.5
EPSS
2.19%
Original NVD Description
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages.