CVE-2016-8580

N/A

Description

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

CVE Details

CVSS v3.1 ScoreN/A

Published10/28/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

alienvault:open_source_security_information_and_event_managementalienvault:unified_security_management

Weaknesses (CWE)

CWE-284

References

http://www.securityfocus.com/bid/93864(cve@mitre.org)

https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities(cve@mitre.org)

https://www.exploit-db.com/exploits/40682/(cve@mitre.org)

http://www.securityfocus.com/bid/93864(af854a3a-2127-422b-91ae-364da2661108)

https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/40682/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.