Vulnerabilities

TI-2024-05316 CVE-2024-5722 · GHSA-7rv4-g7qg-q4mx

Hard-coded credentials in Logsign Unified SecOps Platform

MEDIUM 42

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01103 Published 2024-11-22 No fix listed CWE-321

TI-2024-05315 CVE-2024-5721 · GHSA-6cfx-9cwr-vx7q

MEDIUM 46

Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.05996 Published 2024-11-22 No fix listed CWE-306

TI-2024-05314 CVE-2024-5720 · GHSA-829f-84x3-382w

MEDIUM 45

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02659 Published 2024-11-22 No fix listed CWE-78

TI-2024-05313 CVE-2024-5719 · GHSA-qwxh-j4v9-h3q4

MEDIUM 45

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02659 Published 2024-11-22 No fix listed CWE-78

TI-2024-05312 CVE-2024-5718 · GHSA-jq2h-4qp4-fqq7

MEDIUM 40

Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01487 Published 2024-11-22 No fix listed CWE-306

TI-2024-05311 CVE-2024-5717 · GHSA-gjjm-7g3m-h4m5

MEDIUM 45

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02954 Published 2024-11-22 No fix listed CWE-78

TI-2024-05310 CVE-2024-5716 · GHSA-pvx5-6vgm-chjx

MEDIUM 46

Logsign Unified SecOps Platform Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01592 Published 2024-11-22 No fix listed CWE-307