CVE-2025-66360

Logpoint / SIEM PUBLISHED

Description (CNA)

An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.

Affected (CNA)

Vendor / product	Versions
Logpoint / SIEM	affected 0 before 7.7.0

CWE

CWE-863

References

https://servicedesk.logpoint.com/hc/en-us/articles/29160917867549-Redis-communication-exposed-for-internal-communication

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.