In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets.
References
Link | Resource |
---|---|
https://logpoint.com | Product |
https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets | Vendor Advisory |
https://logpoint.com | Product |
https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets | Vendor Advisory |
Configurations
History
22 Apr 2025, 17:53
Type | Values Removed | Values Added |
---|---|---|
References | () https://logpoint.com - Product | |
References | () https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets - Vendor Advisory | |
First Time |
Logpoint siem
Logpoint |
|
CPE | cpe:2.3:a:logpoint:siem:*:*:*:*:*:*:*:* |
21 Nov 2024, 09:11
Type | Values Removed | Values Added |
---|---|---|
References | () https://logpoint.com - | |
References | () https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets - |
29 Oct 2024, 20:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-203 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
Summary |
|
01 May 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-01 18:15
Updated : 2025-04-22 17:53
NVD link : CVE-2024-30176
Mitre link : CVE-2024-30176
CVE.ORG link : CVE-2024-30176
JSON object : View
Products Affected
logpoint
- siem
CWE
CWE-203
Observable Discrepancy