CVE-2014-4153

Опубликовано: 18 июн. 2014

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.

Конфигурация 1

Одно из

cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:*

Версия до 4.7.0 (включая)

cpe:2.3:a:alienvault:open_source_security_information_management:4.0:*:*:*:*:*:*:*

cpe:2.3:a:alienvault:open_source_security_information_management:4.3.3:*:*:*:*:*:*:*

cpe:2.3:a:alienvault:open_source_security_information_management:4.4:*:*:*:*:*:*:*

cpe:2.3:a:alienvault:open_source_security_information_management:4.5:*:*:*:*:*:*:*

cpe:2.3:a:alienvault:open_source_security_information_management:4.6:*:*:*:*:*:*:*

cpe:2.3:a:alienvault:open_source_security_information_management:4.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07061

Низкий

7.8 High

CVSS2

CWE-200

GHSA-p797-qm67-pc8g

github

больше 3 лет назад