CVE-2014-4153
HighSummary
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
Risk Assessment
Attackers may gain access to sensitive data stored on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 4.8.0 or later to mitigate this vulnerability.
Other vulnerabilities in av-centerd SOAP service
See all- CVE-2014-5210High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted remote_task or get_license requests.
- CVE-2014-4151High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
- CVE-2014-3804High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests related to system info updates, ossec tasks, and admin_ip or framework_ip settings.
Original NVD description (English source)
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.