Alienvault Ossim vulnerabilities

CVE-2017-6972 [CRITICAL] CVE-2017-6972: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.

CVE-2017-6971 [HIGH] CWE-74 CVE-2017-6971: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to exe AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.

CVE-2017-6970 [HIGH] CWE-78 CVE-2017-6970: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.

CVE-2016-7955 [CRITICAL] CWE-264 CVE-2016-7955: The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been creat The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.

CVE-2009-3439 [MEDIUM] CWE-89 CVE-2009-3439: Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpol

CVE-2009-3440 [MEDIUM] CWE-79 CVE-2009-3440: Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) befo Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu).

CVE-2009-3441 [MEDIUM] CWE-287 CVE-2009-3441: Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass a Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.