NetSight
IP …
medium5.0

CVE-2009-3441

Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure informatio…

Impact

Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.

Affected products

VendorProductAffected versions
AlienvaultOssim
through 2.1
Versions 1.0.4, 1.0.6

Weakness classification

CWE-287

References