← Back

CVE-2024-56086

nvd nist
Published: Dec 16, 2024Modified: Apr 17, 2025

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.

Affected (1)

Products: Logpoint: Siem
Logpoint
1 product
Siem
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Siem
Before 7.5.0

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.