CVE-2025-66360
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Risk Assessment
Exposure of sensitive internal information could allow li-admin users to escalate privileges and access critical system resources.
Recommendation
Update Logpoint to version 7.7.0 or later. Fix access control policy configurations to restrict access to internal services.
Other vulnerabilities in Logpoint
Original NVD description (English source)
An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpoint internal service (Redis) information to li-admin users. This can lead to privilege escalation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS