CVE-2020-25094 in Platform Managerinformazioni

Riassunto

di MITRE • 17/12/2020

LogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can inject arbitrary program names and arguments into a WebSocket. These are forwarded to any remote server with a LogRhythm Smart Response agent installed. By default, the commands are run with LocalSystem privileges.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Divulgazione

17/12/2020

Moderazione

accettato

CPE

pronto

EPSS

0.03112

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-25094
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-25094
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-25094/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!