CVE Catalog
CVE-2016-8582
CriticalSummary
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.
Risk Assessment
This vulnerability could lead to the exposure of sensitive data and system compromise, posing a serious threat to organizational security.
Recommendation
It is recommended to upgrade to version 5.3.2 or later to mitigate this vulnerability and secure the system against potential attacks.
Original NVD description (English source)
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.