CVE-2024-48950 - An issue was discovered in Logpoint before 7.5.0

Back Back to CVE browser

HIGH

An issue was discovered in Logpoint before 7.5.0

Published Nov 7, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.33%

Description

An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication.

Affected products

Vendor Logpoint Product Logpoint Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <7.5.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Logpoint

n/a

Version	Status	Constraints
0	affected	<7.5.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (4)

Link	Providers	Tags
https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43144		Advisory
https://servicedesk.logpoint.com/hc/en-us/articles/21968264954525-Authentication-and-CSRF-bypass-leading-to-unauthorized-access		Vendor Advisory
https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security		Product