CVE-2016-7955 The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain se...
CriticalCVSS 9.8
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault ossim | <= 5.3 | No fix listed |
| alienvault unified security management | <= 5.3 | No fix listed |
References
- 20170306 CVE-2016-7955 - Alienvault OSSIM/USM Authentication Bypass mailing-list
- www.zerodayinitiative.com third-party-advisory vdb-entry
- www.alienvault.com vendor-advisory