cbcvebase.
CVE-2014-4153
published 2014-06-18

CVE-2014-4153: The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.

PriorityP352high7.8CVSS 2.0
AVNACLAuNCCINAN
EXPLOIT
EPSS
7.38%
93.7th percentile
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.

Affected

7 ranges
VendorProductVersion rangeFixed in
alienvaultopen_source_security_information_management<= 4.7.0
alienvaultopen_source_security_information_management
alienvaultopen_source_security_information_management
alienvaultopen_source_security_information_management
alienvaultopen_source_security_information_management
alienvaultopen_source_security_information_management
alienvaultopen_source_security_information_management
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.