CVE-2024-7601

Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the HTTP API service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files in the context of root. Was ZDI-CAN-25026.

• CWE-22

• https://support.logsign.net/hc/en-us/articles/20617133769362-06-08-2024-Version-6-4-23-Release-NotesRelease Notes
• https://www.zerodayinitiative.com/advisories/ZDI-24-1106/Third Party Advisory, VDB Entry

Published

Aug 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7594Vault’s SSH secrets engine did not require the valid_princip…8.8
• CVE-2024-7595GRE and GRE6 Protocols (RFC2784) do not validate or verify t…6.5
• CVE-2024-7596Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not…6.5
• CVE-2024-7598A security issue was discovered in Kubernetes where a malici…3.1
• CVE-2024-7599The Advanced Sermons plugin for WordPress is vulnerable to S…5.4
• CVE-2024-7600Logsign Unified SecOps Platform Directory Traversal Arbitrar…8.1
• CVE-2024-7602Logsign Unified SecOps Platform Directory Traversal Informat…6.5
• CVE-2024-7603Logsign Unified SecOps Platform Directory Traversal Arbitrar…8.1
• CVE-2024-7604Logsign Unified SecOps Platform Incorrect Authorization Auth…7.8
• CVE-2024-7605The HelloAsso plugin for WordPress is vulnerable to unauthor…4.3
• CVE-2024-7606The Front End Users plugin for WordPress is vulnerable to St…5.4
• CVE-2024-7607The Front End Users plugin for WordPress is vulnerable to ti…8.8