CVE-2017-6972 AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulner...
CriticalCVSS 9.8
EPSS 14.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault ossim | <= 5.3.6 | No fix listed |
| alienvault unified security management | <= 5.3.6 | No fix listed |
| nfsen | <= 1.3.7 | No fix listed |
References
- 97016 third-party-advisory vdb-entry
- sourceforge.net third-party-advisory
- www.alienvault.com vendor-advisory
- 42314 exploit