Code injection

2015-05-0115:59:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.531 Medium

EPSS

Percentile

97.6%

JSON

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).

CPENameOperatorVersion
unified_security_managementle4.14

CPE	Name	Operator	Version
	unified_security_management	le	4.14

References

www.securityfocus.com/bid/74403

www.zerodayinitiative.com/advisories/ZDI-15-161/

www.alienvault.com/forums/discussion/4415/