Unauthorized information access due to inadequate access controls

Advisory ID: LVD-2024-016

CVSSv 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CVSSv 4.0 Base Score: 6.9

Severity: Medium

CVE: CVE-2025-26789

CWE: CWE-1336

Date Published: 2025-01-28

Description:

A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about AgentX Manager in Logpoint deployment.

Affected Product:

AgentX Versions before v1.5.0

Solution:

Upgrade to AgentX v1.5.0