CVE-2017-6971
HighSummary
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context or launch a reverse shell via vectors involving the PHP session ID and the NfSen PHP code.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover by malicious users.
Recommendation
It is recommended to update to the latest versions of AlienVault USM, OSSIM, and NfSen to mitigate this vulnerability.
Other vulnerabilities in AlienVault USM, OSSIM, NfSen
See all- CVE-2017-6970High
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket.
- CVE-2017-6972Critical
AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.
Original NVD description (English source)
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.