Security Advisory

CVE-2024-48952

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-07 00:00:00

Last updated 2024-11-07 20:03:17

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints.

← Browse all CVEs View on cve.org ↗