Beveiligingsadvies

CVE-2016-7955

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-03-15 16:00:00

Laatst bijgewerkt 2024-08-06 02:13:21

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.

← Alle CVE's bekijken Bekijk op cve.org ↗