CVE-2016-7955

Critical

Published: 15/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1 and USM before 5.3.1 allows remote attackers to bypass authentication, consequently obtaining sensitive information, modifying the application, or executing arbitrary code as root via an 'AV Report Scheduler' HTTP User-Agent header.

Risk Assessment

Authentication bypass poses a serious security risk, allowing attackers to access sensitive data and gain full control over the system.

Recommendation

It is recommended to update to the latest version of AlienVault OSSIM and USM to eliminate this vulnerability and implement additional security measures such as log monitoring and restricting access to critical functions.

Original NVD description (English source)

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.