CVE-2020-25096

LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...

CVE-2020-25096

LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...

CVE-2020-25096

CVE-2020-25096 affects LogRhythm Platform Manager (PM) 7.4.9 and describes an Incorrect Access Control issue where WebSocket-based communication to the PM application server is not protected by access control, allowing a low-privilege user to interact with any back-end component that has a LogRhy...