Alienvault Open Source SIEM (OSSIM) 4.6.1 - (Authenticated) SQL Injection (Metasploit)

Alienvault Open Source SIEM OSSIM 4.6.1 - Authenticated SQL Injection Metasploit Exploit Title: AlienVault newpolicyform.php SQLi Date: 5/9/2014 Exploit Author: chrisdhebertatgmail.com Vendor Homepage: http://www.alienvault.com/ Software Link: http://www.alienvault.com/free-downloads-services...

Learn How SolarWinds Log & Event Manager (LEM) helps you to keep your Network Secure

So, How do you currently monitor your logs and events, including network, servers, databases, applications, your router, firewall or Windows servers? Obviously, If you have thousands of machines on your network.. It will become more complicated. Due to the massive boom in the cyber attacks and...

CVE-2014-0836

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0838

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

Design/Logic Flaw

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

CVE-2014-0835

IBM QRadar SIEM (7.2 MR1 and earlier) is affected by CVE-2014-0835, a Cross-Site Request Forgery that allows an attacker to hijack administrator authentication to modify Auto Update settings. The root cause centers on unauthorized changes to AutoUpdate configuration via CSRF without authenticatio...

CVE-2014-0837

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2014-0835

Cross-site request forgery CSRF vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings...

CVE-2014-0836

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0838

CVE-2014-0838 affects IBM QRadar SIEM: the AutoUpdate component (before 6.4) on QRadar SIEM 7.2 MR1 and earlier allows remote execution of console commands when an attacker can control the update server. Root cause: flaw in the AutoUpdate process that enables arbitrary command execution without l...

CVE-2014-0837

The CVE-2014-0837 issue affects IBM QRadar SIEM (and related QRadar components) where the AutoUpdate process does not verify SSL certificates, allowing MITM attackers to spoof the update server and potentially tamper data. Affected products include QRadar SIEM 7.2 MR1 and earlier (QRM/QVM). The r...

CVE-2014-0836

IBM QRadar SIEM is affected by CVE-2014-0836 (XSS) in 7.2 MR1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL, potentially impacting integrity of data. The IBM Security Bulletin confirms the issue and provides remediation: upgrade to...

CVE-2014-0838

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

CVE-2014-0835: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings...

PT-2014-3879

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2 MR1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings. Recommendations...

PT-2014-3880

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2 MR1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This enables attackers to potentially execute malicious script...

CVE-2014-0836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3882

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions prior to 7.2 MR1 with AutoUpdate package before 6.4 Description The issue allows remote attackers to execute arbitrary console commands by leveraging control of the server. Recommendations For IBM Security...

PT-2014-3881

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2 MR1 and earlier Description The issue concerns the AutoUpdate process, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers by using a crafted...

CVE-2014-0838: Undefined Security Weakness

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...