PT-2012-5031 · Alienvault · Alienvault Ossim

Stefan Schurtz · Published 2012-07-03 · Updated 2020-02-20 · CVE-2012-3835

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management (OSSIM) version 3.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the url parameter to "top.php" or the time[0][0] parameter to "forensics/base qry main.php". This occurs because the parameters are not properly handled in an error page, leading to potential cross-site scripting (XSS) attacks.

Recommendations For AlienVault Open Source Security Information Management (OSSIM) version 3.1, consider restricting access to the "top.php" and "forensics/base qry main.php" pages until a proper fix is applied, and avoid using the url and time[0][0] parameters in these pages to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-3835

Affected Products

Alienvault Ossim

References · 11

• 🔥 https://exploit-db.com/exploits/18800 · Exploit
• 🔥 http://darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html · Exploit
• 🔥 http://exploit-db.com/exploits/18800 · Exploit
• 🔥 http://koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt · Exploit
• 🔥 http://securityfocus.com/bid/53331 · Exploit
• 🔥 https://exploit-db.com/exploits/20062 · Exploit
• http://secunia.com/advisories/49005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3835 · Security Note
• https://t.me/cibsecurity/9979 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3835 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75297 · Note