CVE-2024-5722

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform (affected versions not specified)

Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the HTTP API and results from using a hard-coded cryptographic key. An attacker can leverage this vulnerability to execute code in the context of root. Authentication is not required to exploit this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.