Vulnerability details

CVE-2024-5716

Logsign Unified SecOps PlatformLogsign unified_secops

Logsign Unified SecOps Platform Authentication Bypass Vulnerability

CVSS 3.0

8.6High

Official description

Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164.

CVSS scores

Score	Version	Source	Vector
8.6High	3.0	CVEProject cvelistV5 (CNA) (zdi)	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L`

Affected products

Vendor	Product	Versions	Source
Logsign	Unified SecOps Platform	6.4.6	CVEProject cvelistV5 (CNA)
Logsign	unified_secops	6.4.6 ≤ v < 6.4.8	CISA ADP / Vulnrichment

References and advisories

https://www.zerodayinitiative.com/advisories/ZDI-24-616/ x_research-advisory
https://support.logsign.net/hc/en-us/articles/19316621924754-03-06-2024-Version-6-4-8-Release-Notes vendor-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2024-11-22
Last updated: 2024-11-26
State: Published
Assigner (CNA): zdi

Exploit prediction (EPSS)

1.59%

Probability of exploitation in 30 days

75.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-307
Improper Restriction of Excessive Authentication Attempts