CVE-2024-48954

概要

参考情報

• docs.logpoint.com/docs/whats-new-in-logpoint/en/latest · Release Notes
• servicedesk.logpoint.com/hc/en-us/articles/21968851138461-Remote-Code-Execution-RCE-in-EventHub-Collector · Vendor Advisory
• servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security · Product

siem のその他の脆弱性

• CVE-2025-66361中 6.5An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended period during high CP…
• CVE-2025-66360高 8.8An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service…
• CVE-2025-66359中 6.1An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multiple components leads t…
• CVE-2024-56087中 5.9An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These ar…
• CVE-2024-56086高 7.1An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the b…