CVE-2017-14956

MEDIUM 5.7CVE-2017-14956 · Published 18/10/2017 · updated 17/06/2026

In short

CVE-2017-14956 is a MEDIUM (CVSS 5.7) vulnerability affecting unified security management (alienvault).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified security management alienvault	`≤ 5.4.2`	No fix yet

Description

AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks.

References

packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.html · Exploit
seclists.org/fulldisclosure/2017/Oct/32 · Exploit
securityfocus.com/archive/1/541342/100/0/threaded · Third Party Advisory
securityfocus.com/bid/101284 · Third Party Advisory
exploit-db.com/exploits/42988 · Exploit
rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf · Exploit

More vulnerabilities in unified security management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified security management

alienvault

≤ 5.4.2

No fix yet

Description

More vulnerabilities in unified security management

See all →