CVE-2016-7955

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.

Ссылки

http://www.securityfocus.com/archive/1/540224/100/0/threaded
http://www.zerodayinitiative.com/advisories/ZDI-16-517/
Third Party Advisory
VDB Entry
https://www.alienvault.com/forums/discussion/7765/alienvault-v5-3-1-hotfix
Vendor Advisory
http://www.securityfocus.com/archive/1/540224/100/0/threaded
http://www.zerodayinitiative.com/advisories/ZDI-16-517/
Third Party Advisory
VDB Entry
https://www.alienvault.com/forums/discussion/7765/alienvault-v5-3-1-hotfix
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*

Версия до 5.3 (включая)

cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*

Версия до 5.3 (включая)

EPSS

Процентиль: 92%

0.08552

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-hx3v-mmq4-4qmx