Detections
Analytics

CVE-2024-48950

high

Description

An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication.

References

https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security

https://servicedesk.logpoint.com/hc/en-us/articles/21968264954525-Authentication-and-CSRF-bypass-leading-to-unauthorized-access

https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/

Details

Source: Mitre, NVD

Published: 2024-11-07

Updated: 2024-11-08

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High