CVE-2026-105947: Arbitrary File Read in Innotim Software's Logsign SIEM
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal.
This issue affects Logsign SIEM: from 6.4.120 before 6.4.122.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Logsign SIEMto a version that resolves this vulnerability.Fixed in 6.4.122
Event History
Frequently Asked Questions
Which deployments are affected?
Logsign SIEM versions from 6.4.120 before 6.4.122 are affected. The issue is a path traversal vulnerability that allows arbitrary file read.
What level of access does an attacker need?
The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. The impact is high confidentiality impact, with no integrity or availability impact listed.
What version should be used to remediate the issue?
Update Logsign SIEM to version 6.4.122 or later. Versions before 6.4.122 within the affected range are vulnerable.