CVE-2021-37760: Inclusion of Sensitive Information in Log Files

Severity: Critical

CVSS Score: 9.8

A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).