PT-2017-9432

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 5.3.1 USM versions prior to 5.3.1 Description The issue allows remote attackers to bypass authentication, potentially obtaining sensitive information, modifying the application, or executing arbitrary code as...

CVE-2016-7955: Undefined Security Weakness

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report...