CVE-2015-3446 The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).
HighCVSS 9.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault unified security management | <= 4.14 | No fix listed |
References
- 74403 vdb-entry
- www.zerodayinitiative.com
- www.alienvault.com patch vendor-advisory