249 matches found
Logpoint Universal Normalizer 安全漏洞
Logpoint Universal Normalizer is a universal normalizer from the Danish company Logpoint. A security vulnerability exists in Logpoint Universal Normalizer versions prior to 5.7.0. An attacker could exploit the vulnerability to remotely execute code...
CVE-2024-56087
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
Logpoint 安全漏洞
Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that originates from an authenticated user being able to inject payloads into report templates that are executed when the backup process is initiated,...
CVE-2024-56087: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56085: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56085
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...
CVE-2024-56084: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
CVE-2024-56086: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...
CVE-2024-56086
An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...
CVE-2024-56087
A Server-Side Template Injection (SSTI) vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject and execute malicious payloads while querying the Search Template Dashboard . To remediate this issue, users should update to version 7.5.0 or later. A temporary worka...
CVE-2024-56085
Versions of Logpoint prior to 7.5.0 are susceptible to a Server-Side Template Injection (SSTI) vulnerability. The root cause is the improper neutralization of special elements, allowing authenticated users to inject and execute malicious payloads during the creation of a Search Template Dashboard...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer versions prior to 5.7.0 that allows authenticated users to inject payloads while creating a Universal Normalizer. Due to improper neutralization of special elements used in a command (CWE-77 ), these payloads are executed, potentially leadin...
CVE-2024-48951
An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery SSRF on SOAR can be used to leak Logpoint's API Token leading to authentication bypass...
CVE-2024-48952
An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints...
CVE-2024-48951
An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery SSRF on SOAR can be used to leak Logpoint's API Token leading to authentication bypass...
CVE-2024-48950
An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication...
CVE-2024-48954
An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution...
CVE-2024-48953
An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access...