Lucene search

K
cve[email protected]CVE-2009-3441
HistorySep 28, 2009 - 10:30 p.m.

CVE-2009-3441

2009-09-2822:30:00
CWE-287
web.nvd.nist.gov
26
ossim
open source
security information management
authentication bypass
remote attackers
vulnerability
cve-2009-3441
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.

Affected configurations

NVD
Node
alienvaultossimRange2.1
OR
alienvaultossimMatch1.0.4
OR
alienvaultossimMatch1.0.6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

Related for CVE-2009-3441