Logsign Unified Secops Platform vulnerabilities

CVE-2025-1044 [CRITICAL] CWE-287 CVE-2025-1044: Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remot Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default

CVE-2024-5721 [HIGH] CWE-306 CVE-2024-5721: Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vul Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the cluster HTT

CVE-2024-5717 [HIGH] CWE-78 CVE-2024-5717: Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerab Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl

CVE-2024-5720 [HIGH] CWE-78 CVE-2024-5720: Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerab Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl

CVE-2024-5719 [HIGH] CWE-78 CVE-2024-5719: Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerab Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl

CVE-2024-5716 [CRITICAL] CWE-307 CVE-2024-5716: Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remot Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the

CVE-2024-5718 [HIGH] CWE-306 CVE-2024-5718: Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vul Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the cluster HTT

CVE-2024-5722 [HIGH] CWE-321 CVE-2024-5722: Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerab Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP API

CVE-2024-7600 [HIGH] CWE-22 CVE-2024-7600: Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vuln Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP

CVE-2024-7601 [HIGH] CWE-22 CVE-2024-7601: Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion V Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service

CVE-2024-7603 [HIGH] CWE-22 CVE-2024-7603: Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability. This Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary directories on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which list

CVE-2024-7604 [HIGH] CWE-863 CVE-2024-7604: Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability. This vu Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability. This vulnerability allows local attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP

CVE-2024-7602 [MEDIUM] CWE-22 CVE-2024-7602: Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulne Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listen

CVE-2024-9257 [MEDIUM] CWE-20 CVE-2024-9257: Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vuln Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files within sensitive directories on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists

CVE-2024-7564 [MEDIUM] CWE-22 CVE-2024-7564: Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulne Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the get_response_json_result endpo