CVE-2017-6970
HighSummary
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover by local users.
Recommendation
It is recommended to upgrade to the latest versions of AlienVault USM, OSSIM, and NfSen to mitigate the risk associated with this vulnerability.
Other vulnerabilities in AlienVault USM, OSSIM, NfSen
See all- CVE-2017-6971High
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context or launch a reverse shell via vectors involving the PHP session ID and the NfSen PHP code.
- CVE-2017-6972Critical
AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.
Original NVD description (English source)
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.