Vulnerability Description
An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Logpoint | Siem | < 7.5.0 |
Related Weaknesses (CWE)
References
- https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/Release Notes
- https://servicedesk.logpoint.com/hc/en-us/articles/21968264954525-AuthenticationVendor Advisory
- https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-SecuritProduct
FAQ
What is CVE-2024-48950?
CVE-2024-48950 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication.
How severe is CVE-2024-48950?
CVE-2024-48950 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-48950?
Check the references section above for vendor advisories and patch information. Affected products include: Logpoint Siem.