CVE-2015-3446

2015-05-0115:00:00

mitre

www.cve.org

7.4 High

AI Score

Confidence

High

0.531 Medium

EPSS

Percentile

97.6%

JSON

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).

References

www.securityfocus.com/bid/74403

www.zerodayinitiative.com/advisories/ZDI-15-161/

www.alienvault.com/forums/discussion/4415/