Skip to content
OpenAdvisories
High · 7.5 CVE-2024-48953 EUVD-2024-43147GHSA-c4pf-hc84-698h

An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked pr…

Published Nov 7, 2024 · Updated Nov 7, 2024 · Assigned by mitre

Description

An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access.

References