Vulnerability Description
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alienvault | Open Source Security Information And Event Management | <= 5.3.1 |
| Alienvault | Unified Security Management | <= 5.3.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93866
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5Vendor Advisory
- https://www.exploit-db.com/exploits/40684/
- http://www.securityfocus.com/bid/93866
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5Vendor Advisory
- https://www.exploit-db.com/exploits/40684/
FAQ
What is CVE-2016-8582?
CVE-2016-8582 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via ...
How severe is CVE-2016-8582?
CVE-2016-8582 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-8582?
Check the references section above for vendor advisories and patch information. Affected products include: Alienvault Open Source Security Information And Event Management, Alienvault Unified Security Management.