The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
oryginał ENCVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CAlienvault Open Source Security Information Management
APPAlienvault1.0.41.0.62.12.1.22.1.52.1.5-12.1.5-22.1.5-33.13.1.103.1.123.1.94.04.0.34.0.4+ 14 więcej
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje
Powiązane podatności
CVE-2018-7279CRITICAL9.8ten sam produkt
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVE-2013-6056HIGH7.5ten sam produkt
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2015-4046HIGH7.2ten sam produkt
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbi...
CVE-2014-5158HIGH10.0ten sam produkt
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM befo...
CVE-2014-5159HIGH7.5ten sam produkt
SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote atta...