VulnerabilityAnalyzed

CVE-2024-5716

Logsign Unified SecOps Platform Authentication Bypass Vulnerability.

CRITICAL 9.8EPSS 1.59%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.59% probability · 74th percentile
CISA KEV: Not listed
Weakness: CWE-307
Affected: logsign/unified secops platform
Source: zdi-disclosures@trendmicro.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.