Logrhythm Platform Manager
3 CVEs affecting Logrhythm Platform Manager. Latest disclosed: 2020-12-17. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25094 | Critical | 9.8 | 2020-12-17 | LogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can inject arbitrary program names and arguments into a WebSocket. Thes… |
CVE-2020-25096 | High | 8.8 | 2020-12-17 | LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit w… |
CVE-2020-25095 | High | 8.8 | 2020-12-17 | LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CSWH). If a logged-in PM user visits a ma… |