CVE-2015-4046

2017-05-2303:56:00

mitre

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.8%

JSON

The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.

References

www.securityfocus.com/bid/74795

sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf

www.alienvault.com/forums/discussion/5127/