AlienVault Unified Security Management Plugin Remote Code Execution Vulnerability

AlienVault Unified Security Management Plugin Remote Code Execution Vulnerability
AlienVault Unified Security Management Plugin Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:

AlienVault USM <4.15

Description:

CVE (CAN) ID: CVE-2015-3446

AlienVault Unified Security Management is an enterprise-level Unified Security Management platform.

Security Vulnerabilities exist in the AlienVault framework Background Program of AlienVault Unified Security Management, which can be changed by unauthenticated remote users. cfg file, which specifies the custom function that contains any Python code and executes any code in the root user context.

<* Source: Spencer McIntyre

Link: http://www.zerodayinitiative.com/advisories/ZDI-15-161/
*>

Suggestion:

Vendor patch:

AlienVault
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.alienvault.com/forums/discussion/4415/

This article permanently updates the link address: