ZDI-CAN-23183: ZDI-24-1033: NI FlexLogger Redis Server Incorrect Permission Assignment Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2024-6122.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23183?
The severity of ZDI-CAN-23183 is classified as high due to its potential to disclose sensitive information.
How do I fix ZDI-CAN-23183?
To fix ZDI-CAN-23183, ensure that you update to the latest version of NI FlexLogger provided by National Instruments.
What type of attacks does ZDI-CAN-23183 enable?
ZDI-CAN-23183 enables local attackers to disclose sensitive information after executing low-privileged code on the target system.
On which software does ZDI-CAN-23183 occur?
ZDI-CAN-23183 occurs on affected installations of NI FlexLogger.
What is required for an attacker to exploit ZDI-CAN-23183?
An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-23183.