Unauthenticated Authentication Bypass in Logsign Unified SecOps Platform
A critical authentication bypass vulnerability exists in the Logsign Unified SecOps Platform, which allows remote attackers to circumvent authentication mechanisms without requiring any prior credentials. The vulnerability specifically resides within the web service running on the default TCP port 443 and stems from inadequate implementation of the authentication algorithm. An attacker can exploit this flaw to gain unauthorized access to the system. The vulnerability was identified as ZDI-CAN-25336 and poses significant security risks by enabling unauthenticated remote access to the platform.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
logsign unified secops platform |
Vulmon