CVE-2014-4152

CRITICAL 10.0CVE-2014-4152 · Published 18/06/2014 · updated 17/06/2026

In short

CVE-2014-4152 is a CRITICAL (CVSS 10.0) vulnerability affecting open source security information management (alienvault).
Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open source security information management alienvault	`= 4.0= 4.3.3= 4.4= 4.5= 4.6= 4.6.1≤ 4.7.0`	No fix yet

Description

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.

References

forums.alienvault.com/discussion/2806 · Vendor Advisory
secunia.com/advisories/59112
zerodayinitiative.com/advisories/ZDI-14-206

More vulnerabilities in open source security information management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free