Remote Code Execution Vulnerability in Logpoint Report Templates

CVE-2024-56086

What is CVE-2024-56086?

CVE-2024-56086 is a critical security vulnerability identified in Logpoint versions prior to 7.5.0. The issue arises from a flaw that allows authenticated users to inject malicious payloads into Report Templates. These payloads are executed during the backup process, inadvertently granting attackers the ability to execute arbitrary code remotely. Due to the potential for serious exploitation, including unauthorized access and control over affected systems, it is crucial for organizations utilizing Logpoint to upgrade to version 7.5.0 or later to mitigate this risk. For detailed guidance on addressing this vulnerability, please refer to the Logpoint Service Desk.

References