Lucene search

K
cve[email protected]CVE-2009-3439
HistorySep 28, 2009 - 10:30 p.m.

CVE-2009-3439

2009-09-2822:30:00
CWE-89
web.nvd.nist.gov
30
cve-2009-3439
ossim
sql injection vulnerabilities
security
nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.4%

Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu.

Affected configurations

NVD
Node
alienvaultossimRange2.1
OR
alienvaultossimMatch1.0.4
OR
alienvaultossimMatch1.0.6
OR
alienvaultossimMatch2.132bit
OR
alienvaultossimMatch2.164bit

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.4%

Related for CVE-2009-3439