CVE-2017-6972
CriticalSummary
AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover.
Recommendation
It is recommended to update to the latest versions of AlienVault USM, OSSIM, and NfSen to mitigate this vulnerability.
Other vulnerabilities in AlienVault USM, OSSIM, NfSen
See all- CVE-2017-6971High
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context or launch a reverse shell via vectors involving the PHP session ID and the NfSen PHP code.
- CVE-2017-6970High
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket.
Original NVD description (English source)
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.