| Package | Affected versions | Patched versions |
|---|---|---|
| ossim | = 1.0.4= 1.0.6≤ 2.1 |
Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free