What is CVE-2024-7600?

CVE-2024-7600 is a high-severity vulnerability in Logsign Unified Secops Platform, classified under Path Traversal. CVSS score: 8.1/10. Published 2024-08-21.

How severe is CVE-2024-7600?

High severity. CVSS v3 base score is 8.1 out of 10.

Path Traversal in Logsign Unified Secops Platform

CVE-2024-7600

Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Logsign Unified Secops Platform — versions 6.4.20
Logsign Unified_secops_platform — versions 6.4.20

Weakness classification (CWE)

CWE-22 — Path Traversal

References

zdi-disclosures@trendmicro.com (x_research-advisory, VDB Entry, Third Party Advisory)
zdi-disclosures@trendmicro.com (vendor-advisory, Release Notes)

Frequently asked questions

What is CVE-2024-7600?: CVE-2024-7600 is a high-severity vulnerability in Logsign Unified Secops Platform, classified under Path Traversal. CVSS score: 8.1/10. Published 2024-08-21.
How severe is CVE-2024-7600?: High severity. CVSS v3 base score is 8.1 out of 10.