CVE-2014-4153

2014-06-1819:55:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2014-4153

av-centerd

soap service

alienvault ossim

remote attackers

arbitrary files

get_file request

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.271 Low

EPSS

Percentile

96.8%

JSON

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.

CPENameOperatorVersion
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.3.3
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.5
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.0
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.4
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.6.1
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.6
alienvault:open_source_security_information_managementalienvault open source security information managementle4.7.0

CPE	Name	Operator	Version
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.3.3
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.5
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.0
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.4
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.6.1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.6
alienvault:open_source_security_information_management	alienvault open source security information management	le	4.7.0