CVE-2024-48952
CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints.
| Vendor | n/a |
| Product | n/a |
| Published | Nov 7, 2024 |
| Last Updated | Nov 7, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new medium vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
docs.logpoint.com: https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ servicedesk.logpoint.com: https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security servicedesk.logpoint.com: https://servicedesk.logpoint.com/hc/en-us/articles/21968950913693-Static-JWT-Key-enables-unauthorized-API-access