1. Logsign Support Center
  2. Release Notes
  3. USO Platform Release Notes

07/08/2024 - Version 6.4.22 Release Notes

Updated
🔧 Security Enhancements
Summary
The enhancements are intended to bolster our system's overall security posture and 
defend against potential threats.

Affected Version


Solution


Vulnerability Details
> ZDI-CAN-25025 > Logsign Unified SecOps Platform Directory Traversal 
  Arbitrary File Deletion Vulnerability
> ZDI-CAN-25026: Logsign Unified SecOps Platform Directory data_export_delete_all 
  Traversal Arbitrary File Deletion Vulnerability
> ZDI-CAN-25027: Logsign Unified SecOps Platform Directory Traversal Information
  Disclosure Vulnerability
> ZDI-CAN-25028: Logsign Unified SecOps Platform Directory Traversal 
  Arbitrary Directory Deletion Vulnerability
> ZDI-CAN-25029: Logsign Unified SecOps Platform Incorrect Authorization 
  Authentication Bypass Vulnerability

Mitigating Factors
Customers are advised to ensure they always have the latest version of the program.

Acknowledgement
Logsign would like to thank Abdessamad Lahlali and Smile Thanapattheerakul from 
Trend Micro Zero Day Initiative for responsibly disclosing this issue.
Was this article helpful?
0 out of 0 found this helpful

Articles in this section

See more
Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.