PT-2012-5031 · Alienvault · Alienvault Ossim

Stefan Schurtz · Publicado 2012-07-03 · Atualizado 2020-02-20 · CVE-2012-3835

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management (OSSIM) version 3.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the url parameter to "top.php" or the time[0][0] parameter to "forensics/base qry main.php". This occurs because the parameters are not properly handled in an error page, leading to potential cross-site scripting (XSS) attacks.

Recommendations For AlienVault Open Source Security Information Management (OSSIM) version 3.1, consider restricting access to the "top.php" and "forensics/base qry main.php" pages until a proper fix is applied, and avoid using the url and time[0][0] parameters in these pages to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-3835

Produtos afetados

Alienvault Ossim

Referências · 11

• 🔥 https://exploit-db.com/exploits/18800 · Exploit
• 🔥 http://darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html · Exploit
• 🔥 http://exploit-db.com/exploits/18800 · Exploit
• 🔥 http://koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt · Exploit
• 🔥 http://securityfocus.com/bid/53331 · Exploit
• 🔥 https://exploit-db.com/exploits/20062 · Exploit
• https://t.me/cibsecurity/9979 · Publicação no Telegram
• http://secunia.com/advisories/49005 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3835 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75297 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3835 · Nota de Segurança