In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets.
References
| Link | Resource |
|---|---|
| https://logpoint.com | Product |
| https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets | Vendor Advisory |
| https://logpoint.com | Product |
| https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets | Vendor Advisory |
Configurations
History
22 Apr 2025, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Logpoint siem
Logpoint |
|
| CPE | cpe:2.3:a:logpoint:siem:*:*:*:*:*:*:*:* | |
| References | () https://logpoint.com - Product | |
| References | () https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets - Vendor Advisory |
21 Nov 2024, 09:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://logpoint.com - | |
| References | () https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets - |
29 Oct 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-203 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| Summary |
|
01 May 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-01 18:15
Updated : 2025-04-22 17:53
NVD link : CVE-2024-30176
Mitre link : CVE-2024-30176
CVE.ORG link : CVE-2024-30176
JSON object : View
Products Affected
logpoint
- siem
CWE
CWE-203
Observable Discrepancy
