CVE-2024-5716 Logsign Unified SecOps Platform Authentication Bypass Vulnerability

High 8.6 Published 22 Nov 2024 Updated 26 Nov 2024

Remote attackers can bypass authentication by exploiting unrestricted password reset attempts, leading to account takeover on Logsign Unified SecOps Platform.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-5716?

CVE-2024-5716 is a high-severity authentication bypass vulnerability in Logsign Unified SecOps Platform, published on 22 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164.

Weakness: CWE-307

Which versions are affected by CVE-2024-5716?

It affects 1 product.

Products include Logsign Unified Secops Platform.

How do I fix CVE-2024-5716?

No fix has been published for CVE-2024-5716 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2024-5716 being exploited?

There is no known exploitation of CVE-2024-5716 in the wild and no public exploit code.

Sources

Also known as GHSA-pvx5-6vgm-chjx.