CVE-2024-36383
May 27, 2024, 11:15 a.m.
Tags
Product(s) Impacted
Logpoint
- before 6.0.3
Description
An issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the state field of a SAML SSO-URL response, and the file corresponding to this filename will ultimately be deleted. This can lead to a SAML Authentication login outage.
Weaknesses
Date
Published: May 27, 2024, 11:15 a.m.
Last Modified: May 27, 2024, 11:15 a.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
References
https://servicedesk.logpoint.com/
cve@mitre.org