Logpoint Universal Normalizer 安全漏洞

Logpoint Universal Normalizer is a universal normalizer from the Danish company Logpoint. A security vulnerability exists in Logpoint Universal Normalizer versions prior to 5.7.0. An attacker could exploit the vulnerability to remotely execute code...

CVE-2024-56087: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56086: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that originates from an authenticated user being able to inject payloads into report templates that are executed when the backup process is initiated,...

CVE-2024-56084

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...

CVE-2024-56086

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...

CVE-2024-56084: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...

CVE-2024-56085

Versions of Logpoint prior to 7.5.0 are susceptible to a Server-Side Template Injection (SSTI) vulnerability. The root cause is the improper neutralization of special elements, allowing authenticated users to inject and execute malicious payloads during the creation of a Search Template Dashboard...

CVE-2024-56087

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56085: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56085

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56084

Logpoint UniversalNormalizer versions prior to 5.7.0 are vulnerable to a security issue involving the improper neutralization of special elements used in a command. Authenticated users can inject malicious payloads while creating a Universal Normalizer, which are subsequently executed by the syst...

CVE-2024-56087

A Server-Side Template Injection (SSTI) vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject and execute malicious payloads while querying the Search Template Dashboard . To remediate this issue, users should update to version 7.5.0 or later. A temporary worka...

CVE-2024-48951

An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery SSRF on SOAR can be used to leak Logpoint's API Token leading to authentication bypass...

CVE-2024-48952

An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints...

CVE-2024-48950

An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication...

CVE-2024-48951

An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery SSRF on SOAR can be used to leak Logpoint's API Token leading to authentication bypass...

CVE-2024-48954

An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution...

CVE-2024-48950

An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication...

CVE-2024-48952

An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints...