VulnerabilityAnalyzed
CVE-2024-33860
It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector.
MEDIUM 6.5EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-73
- Affected
- logpoint/siem
- Source
- cve@mitre.org
References
- https://logpoint.comProduct
- https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-CollectorVendor Advisory
- https://logpoint.comProduct
- https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-CollectorVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.