Lucene search
HistoryAug 21, 2014 - 2:55 p.m.
CVE-2014-5210
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.953 High
EPSS
Percentile
99.4%
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
Affected configurations
Node
alienvaultopen_source_security_information_managementRange≤4.6.1
ORalienvaultopen_source_security_information_managementMatch1.0.4
ORalienvaultopen_source_security_information_managementMatch1.0.6
ORalienvaultopen_source_security_information_managementMatch2.1
ORalienvaultopen_source_security_information_managementMatch2.1.2
ORalienvaultopen_source_security_information_managementMatch2.1.5
ORalienvaultopen_source_security_information_managementMatch2.1.5-1
ORalienvaultopen_source_security_information_managementMatch2.1.5-2
ORalienvaultopen_source_security_information_managementMatch2.1.5-3
ORalienvaultopen_source_security_information_managementMatch3.1
ORalienvaultopen_source_security_information_managementMatch3.1.9
ORalienvaultopen_source_security_information_managementMatch3.1.10
ORalienvaultopen_source_security_information_managementMatch3.1.12
ORalienvaultopen_source_security_information_managementMatch4.0
ORalienvaultopen_source_security_information_managementMatch4.0.3
ORalienvaultopen_source_security_information_managementMatch4.0.4
ORalienvaultopen_source_security_information_managementMatch4.1
ORalienvaultopen_source_security_information_managementMatch4.1.2
ORalienvaultopen_source_security_information_managementMatch4.1.3
ORalienvaultopen_source_security_information_managementMatch4.2
ORalienvaultopen_source_security_information_managementMatch4.2.2
ORalienvaultopen_source_security_information_managementMatch4.2.3
ORalienvaultopen_source_security_information_managementMatch4.3
ORalienvaultopen_source_security_information_managementMatch4.3.1
ORalienvaultopen_source_security_information_managementMatch4.3.2
ORalienvaultopen_source_security_information_managementMatch4.3.3
ORalienvaultopen_source_security_information_managementMatch4.4
ORalienvaultopen_source_security_information_managementMatch4.5
ORalienvaultopen_source_security_information_managementMatch4.6
Related
prion
prion
Cross site request forgery (csrf)
2014-08-21 14:55:00
Design/Logic Flaw
2014-06-13 14:55:00
Cross site request forgery (csrf)
2014-06-13 14:55:00
cve
cve
cvelist
cvelist
nvd
nvd
CVE-2014-3804
2014-06-13 14:55:15
CVE-2014-3805
2014-06-13 14:55:15
openvas
openvas
AlienVault OSSIM Multiple RCE Vulnerabilities
2014-06-20 00:00:00
zdi
zdi
checkpoint_advisories
checkpoint_advisories
exploitpack
exploitpack
dsquare
dsquare
AlienVault OSSIM av-centerd Util.pm RCE
2014-06-20 00:00:00
packetstorm
packetstorm
AlienVault OSSIM av-centerd Command Injection
2014-06-19 00:00:00
Alienvault OSSIM av-centerd Util.pm sync_rserver Command Execution
2017-09-15 00:00:00
Alienvault OSSIM av-centerd 4.7.0 get_log_line Command Injection
2017-09-14 00:00:00
zdt
zdt
AlienVault OSSIM av-centerd Command Injection Exploit
2014-06-20 00:00:00
Alienvault OSSIM av-centerd 4.7.0 - (get_log_line) Command Injection Exploit
2017-09-13 00:00:00
seebug
seebug
AlienVault OSSIM < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution
2014-07-01 00:00:00
nessus
nessus
AlienVault OSSIM 'av-centerd' Remote Code Execution
2014-06-23 00:00:00
exploitdb
exploitdb
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.953 High
EPSS
Percentile
99.4%
Related for NVD:CVE-2014-5210