CVE-2017-6971

Опубликовано: 22 мар. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Средний

Описание

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.

Ссылки

https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/
Third Party Advisory
https://www.alienvault.com/forums/discussion/8325/
Vendor Advisory
https://www.alienvault.com/forums/discussion/8698
Vendor Advisory
https://www.exploit-db.com/exploits/42306/
https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/
Third Party Advisory
https://www.alienvault.com/forums/discussion/8325/
Vendor Advisory
https://www.alienvault.com/forums/discussion/8698
Vendor Advisory
https://www.exploit-db.com/exploits/42306/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*

Версия до 5.3.6 (включая)

cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*

Версия до 5.3.6 (включая)

Конфигурация 2

cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*

Версия до 1.3.7 (включая)

EPSS

Процентиль: 96%

0.29232

Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-q8hc-xr26-2j5g