Medium severity6.4NVD Advisory· Published Nov 7, 2024· Updated Jun 17, 2026

CVE-2024-48952

Description

An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Logpoint/Logpointcpe-rescue
Logpoint/SOARllm-create
Range: <7.5.0

Patches

Vulnerability mechanics

References

servicedesk.logpoint.com/hc/en-us/articles/21968950913693-Static-JWT-Key-enables-unauthorized-API-accessnvdVendor Advisory
docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/nvdRelease Notes
servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-SecuritynvdProduct

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000