CVE-2017-6972

Critical

Published: 22/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover.

Recommendation

It is recommended to update to the latest versions of AlienVault USM, OSSIM, and NfSen to mitigate this vulnerability.

Original NVD description (English source)

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.