The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HAlienvault Open Source Security Information Management
APPAlienvault≤ 5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2018-7279CRITICAL9.8ten sam produkt
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVE-2013-6056HIGH7.5ten sam produkt
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2014-5210HIGH10.0ten sam produkt
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary comm...
CVE-2014-5158HIGH10.0ten sam produkt
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM befo...
CVE-2014-5159HIGH7.5ten sam produkt
SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote atta...