CVE-2009-3441 Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/ala...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault ossim | <= 2.1 | No fix listed |
| alienvault ossim | = 1.0.4 | No fix listed |
| alienvault ossim | = 1.0.6 | No fix listed |
References
- dsecrg.com exploit
- 36867 third-party-advisory vendor-advisory
- 20090923 [DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities mailing-list
- 36504 exploit vdb-entry