high7.8Public exploit code
CVE-2014-4153
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alienvault Open Source SIEM (OSSIM) < 4.8.0 - 'get_file' Information Disclosure (Metasploit)2014-06-13 · remote · linux
Impact
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alienvault | Open Source Security Information Management | through 4.7.0 Versions 4.0, 4.3.3, 4.4, 4.5, 4.6 |