CVE-2019-7323 | BDVDB-2026-112421 Detail

Description#

GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the LogMXUpdater.class file.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-02-04Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.