CVE-2016-8580 in OSSIM

Summary

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 10/10/2016
• Disclosure: 10/28/2016
• Moderation: VulDB entry created
• Entries: VDB-93174 (1)
• CPE: ready
• CWE: CWE-284 (Confirmed)
• Exploit: Download
• CVSS: 9.8
• EPSS: 0.12558
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8580
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8580
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8580/