ZDI-24-1104: Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability
First published: Thu Aug 08 2024(Updated: )
This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of the user's license expiration date. An attacker can leverage this vulnerability to bypass authentication on the system.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Logsign Unified SecOps Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-24-1104?
ZDI-24-1104 has been classified as a high-severity vulnerability due to the potential for local attackers to bypass authentication.
How do I fix ZDI-24-1104?
To remediate ZDI-24-1104, apply the latest security patches provided by Logsign for the Unified SecOps Platform.
Who is affected by ZDI-24-1104?
ZDI-24-1104 affects installations of the Logsign Unified SecOps Platform that are running the vulnerable HTTP API service.
What is the impact of ZDI-24-1104?
The impact of ZDI-24-1104 is that local attackers could gain unauthorized access to the system by bypassing authentication mechanisms.
Is authentication required to exploit ZDI-24-1104?
Yes, authentication is required for the exploitation of the ZDI-24-1104 vulnerability.
- collector/zdi-published
- source/ZDI
- alias/ZDI-CAN-25029
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- collector/zdi-advisory
- alias/ZDI-24-1104
- alias/CVE-2024-7604
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/softwarecombine
- agent/description
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/logsign
- canonical/logsign unified secops platform