| Package | Affected versions | Patched versions |
|---|---|---|
| ossim | ≤ 5.3.6 | |
| unified security management | ≤ 5.3.6 | |
| nfsen | ≤ 1.3.7 |
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free