CVE-2025-62189: Medium severity LogStare Collector vulnerability

Published Nov 21, 2025
·
Updated

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.

Affected Software

4 affected components
LogStare Collector
All of the following
Secuavail Logstare Collector<2.4.2
Any of the following
Linux Linux kernel
Microsoft Windows

Event History

Nov 21, 2025
CVE Published
via MITRE·06:17 AM
Data Sourced
via MITRE·06:17 AM
DescriptionSeverity
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-62189?

CVE-2025-62189 is classified as a medium severity vulnerability due to its potential impact on user account management.

2

How do I fix CVE-2025-62189?

To fix CVE-2025-62189, update to the latest version of LogStare Collector that addresses this authorization issue.

3

What impact does CVE-2025-62189 have?

CVE-2025-62189 allows a non-administrative user to create new user accounts through crafted HTTP requests, potentially compromising user account integrity.

4

Who is affected by CVE-2025-62189?

CVE-2025-62189 affects users of LogStare Collector who do not implement the necessary security updates.

5

Is CVE-2025-62189 easy to exploit?

Yes, CVE-2025-62189 can be easily exploited by an attacker with access to the application, making it critical to address promptly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203