CVE-2014-5210

2014-08-2114:55:00

CWE-94

[email protected]

web.nvd.nist.gov

av-centerd

soap service

alienvault ossim

remote attackers

arbitrary commands

cve-2014-5210

7.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.886 High

EPSS

Percentile

98.7%

JSON

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.

CPENameOperatorVersion
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.1.2
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.3.3
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-3
alienvault:open_source_security_information_managementalienvault open source security information managementeq3.1
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1.5-2
alienvault:open_source_security_information_managementalienvault open source security information managementeq2.1
alienvault:open_source_security_information_managementalienvault open source security information managementeq3.1.12
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.2.2
alienvault:open_source_security_information_managementalienvault open source security information managementeq4.0.4

CPE	Name	Operator	Version
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.1.2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.3.3
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-3
alienvault:open_source_security_information_management	alienvault open source security information management	eq	3.1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1.5-2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	2.1
alienvault:open_source_security_information_management	alienvault open source security information management	eq	3.1.12
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.2.2
alienvault:open_source_security_information_management	alienvault open source security information management	eq	4.0.4