CVEvulnerability
CVE-2016-8582
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.
Affected configurations
• alienvault open source security information and event management (<= 5.3.1)
• alienvault unified security management (<= 5.3.1)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/93866 www.securityfocus.com
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities Vendor Advisory
- https://www.exploit-db.com/exploits/40684/ www.exploit-db.com
- http://www.securityfocus.com/bid/93866 www.securityfocus.com
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities Vendor Advisory
- https://www.exploit-db.com/exploits/40684/ www.exploit-db.com