CVE-2019-7323

CVE-2019-7323 describes an authenticity bypass vulnerability in the GUP (generic update process) of LightySoft LogMX versions prior to 7.4.0. This flaw allows a man-in-the-middle attacker to execute arbitrary code by replacing the LogMXUpdater.class file with a malicious Trojan horse update, facilitated by the update process's reliance on cleartext HTTP. The vulnerability carries a CVSSv3 score of 7.5 (HIGH), indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires user interaction and high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.