Alienvault OSSIM/USM 5.3.1 - Persistent Cross-Site Scripting

ID EDB-ID:40683
Type exploitdb
Reporter Peter Lapp
Modified 2016-11-02T00:00:00


Alienvault OSSIM/USM 5.3.1 - Persistent Cross-Site Scripting. CVE-2016-8581. Webapps exploit for PHP platform


Product: Alienvault OSSIM/USM
Vulnerability: Stored XSS
Author: Peter Lapp, lappsec () gmail com
CVE: CVE-2016-8581
CVSS: 3.5
Vulnerable Versions: <=5.3.1
Fixed Version: 5.3.2

Vulnerability Details

A stored XSS vulnerability exists in the User-Agent header of the
login process. It's possible to inject a script into that header that
then gets executed when mousing over the User-Agent field in Settings
-> Current Sessions.


The POC uses jQuery to send all session IDs on the "Current Sessions"
page to an arbitrary site (Google, in this case)



08/03/16 - Reported to Vendor
10/03/16 - Fixed in version 5.3.2