Lucene search

[email protected]CVE-2012-3834

HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3834

2012-07-0322:55:02

CWE-89

[email protected]

web.nvd.nist.gov

cve-2012-3834

sql injection

alienvault

ossim

security vulnerability

nvd

8.2 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.3%

JSON

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.

Affected configurations

NVD

Node

alienvaultopen_source_security_information_managementMatch3.1

CPENameOperatorVersion
alienvault:open_source_security_information_managementalienvault open source security information managementeq3.1

CPE	Name	Operator	Version
alienvault:open_source_security_information_management	alienvault open source security information management	eq	3.1

References

secunia.com/advisories/49005

www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html

www.exploit-db.com/exploits/18800

www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt

www.securityfocus.com/bid/53331

exchange.xforce.ibmcloud.com/vulnerabilities/75290

8.2 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.3%

JSON

Related for CVE-2012-3834

nvd1 prion1 cvelist1 ubuntucve1