CVE Catalog
CVE-2016-8580
CriticalSummary
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before version 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.
Risk Assessment
These vulnerabilities can lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to upgrade to version 5.3.2 or later to mitigate these vulnerabilities and conduct a security audit of the application.
Original NVD description (English source)
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.