BlackStratus LOGStorm 4.5.1.35 / 4.5.1.96 Remote Root
Posted by deepcore on December 6, 2016 – 6:45 am
BlackStratus LOGStorm has multiple vulnerabilities that allow a remote unauthenticated user, among other things, to assume complete control over the virtual appliance with root privileges. This is possible due to multiple network servers listening for network connections by default, allowing authorization with undocumented credentials supported by appliance’s OS, web interface and sql server. Versions 4.5.1.35 and 4.5.1.96 are affected.
Post a reply
You must be logged in to post a comment.