Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform

Earlier this year, the Trend Micro Zero Day Initiative (ZDI) acquired several vulnerabilities in the Logsign Unified SecOps Platform. These were all reported to the ZDI by Mehmet INCE (@mdisec) from PRODAFT.com. According to Logsign’s website:

Logsign provides comprehensive visibility and control of your data lake by allowing security analysts to collect and store unlimited data, investigate and detect threats, and respond automatically.

Logsign offers a single, unified whole security operation platform to alleviate the challenges associated with deploying …

analysts code code execution com control data data lake initiative micro platform prodaft remote code remote code execution secops security trend trend micro trend micro zero day initiative unauthenticated visibility vulnerabilities website zdi zero day initiative