GEMS contains a flaw that may allow a malicious user to manipulate audit logs. The issue is triggered when a malicious user conducts one of four actions which are not recorded by the audit logs. It is possible that the flaw may allow unauditable transactions resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
OSVDB:
Authentication Required
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
