CVE-2024-5722

Summary

CVE-2024-5722 is a remote code execution vulnerability affecting the Logsign Unified SecOps Platform HTTP API. The issue arises due to the use of a hard-coded cryptographic key, which can be exploited by network-adjacent attackers without requiring authentication. This vulnerability allows an attacker to execute arbitrary code in the context of root. The flaw was identified as ZDI-CAN-24170 and could potentially lead to significant security implications for affected installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.