ZDI-CAN-25265: ZDI-24-1295: Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability
First published: Thu Sep 26 2024(Updated: )
This vulnerability allows remote attackers to delete arbitrary files within sensitive directories on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the delete_gsuite_key_file endpoint. The issue results from the lack of proper validation of a user-supplied filename prior to using it in file operations. An attacker can leverage this vulnerability to delete critical files on the system.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Logsign Unified SecOps Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-25265?
The severity of ZDI-CAN-25265 is classified as important as it allows authenticated remote attackers to delete arbitrary files.
How do I fix ZDI-CAN-25265?
To fix ZDI-CAN-25265, ensure that your Logsign Unified SecOps Platform is updated to the latest version as recommended by the vendor.
What type of attacks are possible with ZDI-CAN-25265?
ZDI-CAN-25265 allows remote authenticated attackers to manipulate file systems and potentially compromise sensitive data.
Does ZDI-CAN-25265 require authentication?
Yes, ZDI-CAN-25265 requires authentication to exploit the vulnerability.
What software is affected by ZDI-CAN-25265?
ZDI-CAN-25265 affects the Logsign Unified SecOps Platform.
- collector/zdi-published
- source/ZDI
- alias/ZDI-CAN-25265
- agent/title
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- collector/zdi-advisory
- alias/ZDI-24-1295
- alias/CVE-2024-9257
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/softwarecombine
- agent/trending
- agent/tags
- agent/source
- vendor/logsign
- canonical/logsign unified secops platform