vulnwire
9.8crit

CVE-2016-85802 exploits

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2.

Published 10 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.9%
percentile 94%
Public exploits
2
Exploit-DB

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

Exploit prediction (EPSS)

6.86% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-41424 AlienVault OSSIM/USM < 5.3.1 - Remote Code Execution (Metasploit) · webapps · 2017-01-31
  • EDB-40682 Alienvault OSSIM/USM 5.3.1 - PHP Object Injection · webapps · 2016-11-02

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

References

  • alienvault.com /forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities · x_refsource_CONFIRM, x_transferred
  • exploit-db.com /exploits/40682/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /bid/93864 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.