Description (CNA)
An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Logpoint / Logpoint | affected 0 before 7.6.0 |
CWE
CWE-23
References
- https://servicedesk.logpoint.com/hc/en-us/articles/28685507675549-Path-Traversal-in-Layout-Templates-Allows-Remote-Code-Execution
- https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security
ADP enrichment
No English description supplied.
No references supplied.