Graylog Remote Code Execution (CVE-2024-24824)

Related Vulnerabilities: CVE-2024-24824  

Check Point Reference: CPAI-2024-0071 Date Published: 28 Feb 2024 Severity: High Last Updated: Wednesday 28 February, 2024 Source: Industry Reference:CVE-2024-24824
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? Graylog 2.0.0 and later, prior to 5.1.11
Graylog 5.2.0 and later, prior to 5.2.4 Vulnerability Description A remote code execution vulnerability exists in Graylog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.