High · published November 28, 2025
⚠️ A misconfigured access control policy in Logpoint could let users peek behind the curtain! Think of it like a restaurant where some patrons can wander into the kitchen uninvited. An improperly secured door allows curious diners to access sensitive recipes and kitchen secrets, putting the restaurant’s reputation at risk. If a li-admin user gains access to this sensitive Redis information, it could lead to privilege escalation, allowing them to perform actions they shouldn’t have permission for. This could jeopardize the integrity of your data and system, leading to potential chaos in your environment!
Think of it like a restaurant where some patrons can wander into the kitchen uninvited. An improperly secured door allows curious diners to access sensitive recipes and kitchen secrets, putting the restaurant’s reputation at risk. This vulnerability in Logpoint allows li-admin users to access sensitive internal Redis service information due to improper access control configuration, which can lead to unauthorized privilege escalation.
If a li-admin user gains access to this sensitive Redis information, it could lead to privilege escalation, allowing them to perform actions they shouldn’t have permission for. This could jeopardize the integrity of your data and system, leading to potential chaos in your environment! Upgrade Logpoint to version 7.7.0 or later to correct the access control policy. Additionally, review your access controls to ensure that only authorized users can access sensitive information. You can tackle this! Follow the steps to secure your Logpoint setup, and you'll be a security hero in no time! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| logpoint/siem | < 7.7.0 | 7.7.0 |