CVEvulnerability
CVE-2024-33860
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-73
Description
An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File System Collector. The content of the file specified can be viewed in the incoming logs.
Affected configurations
• logpoint siem (< 7.4.0)
Related
Weakness · CWE (1)
- CWE-73 External Control of File Name or Path weakness
References
- https://logpoint.com Product
- https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-Collector Vendor Advisory
- https://logpoint.com Product
- https://servicedesk.logpoint.com/hc/en-us/articles/18533986803741-Local-File-Inclusion-in-File-System-Collector Vendor Advisory