AlienVault USM, OSSIM, NfSen vulnerabilities

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context or launch a reverse shell via vectors involving the PHP session ID and the NfSen PHP code.

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket.

AlienVault USM and OSSIM before version 5.3.7 and NfSen before version 1.3.8 have an error in privilege dropping, resulting in unnecessary execution of NfSen Perl code as root.