CVE-2014-4152

High

Published: 18/06/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.

Risk Assessment

An attacker could gain full control over the system, leading to serious security threats for the organization.

Recommendation

It is recommended to upgrade to version 4.8.0 or later to mitigate this vulnerability.

Other vulnerabilities in av-centerd SOAP service in AlienVault OSSIM

CVE-2014-3805High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests (1) get_license, (2) get_log_line, or (3) update_system/upgrade_pro_web.

Original NVD description (English source)

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.