Logsign Unified SecOps Platform Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Logsign Unified SecOps Platform. This issue allows remote attackers to bypass authentication on affected systems. The vulnerability arises from improper implementation of the authentication algorithm in the web service, which by default listens on TCP port 443. Notably, authentication is not required to exploit this vulnerability.

Impact

Exploitation of this vulnerability allows for unauthorized access to the affected system, bypassing authentication mechanisms entirely.

Remediation

Logsign has released an update to address this vulnerability. Details about the update can be found in the Logsign release notes.