Medium · 6.4 CVE-2024-48954 EUVD-2024-43148GHSA-jgqg-jqq9-5x4c

An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to R…

Published Nov 7, 2024 · Updated Nov 7, 2024 · Assigned by mitre

Description

An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution.

References

https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/
https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security
https://servicedesk.logpoint.com/hc/en-us/articles/21968851138461-Remote-Code-Execution-RCE-in-EventHub-Collector