Home

Description

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution.

PUBLISHED Reserved 2024-12-16 | Published 2024-12-16 | Updated 2024-12-23 | Assigner mitre

Problem types

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

References

servicedesk.logpoint.com/...le-creating-Universal-Normalizer

cve.org (CVE-2024-56084)

nvd.nist.gov (CVE-2024-56084)

Download JSON