Vulnerabilities

TI-2020-15347 CVE-2020-25094 · GHSA-r929-7jrv-6rh2

LogRhythm Platform Manager 7.4.9 allows Command Injection.

MEDIUM 48

LogRhythm Platform Manager 7.4.9 allows Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03176 Published 2020-12-17 No fix listed CWE-78

TI-2020-15348 CVE-2020-25095 · GHSA-6mh7-r2rw-gp32

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 allows CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2020-12-17 No fix listed CWE-352

TI-2020-15349 CVE-2020-25096 · GHSA-3j89-v6qj-mgf2

MEDIUM 40

LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01024 Published 2020-12-17 No fix listed