Intrusion PreventionAlienVault.USM.OSSIM.gauge.PHP.SQL.Injection
Description
This indicates an attack attempt to exploit an SQL Injection Vulnerability in AlienVault Unified Security Management and Open Source SIEM.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker could exploit this to execute arbitrary command as root, via a crafted request.
Affected Products
AlienVault OSSIM prior to 5.3.2
AlienVault Unified Security Management prior to 5.3.2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the latest update from the vendor.
https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 43422 |
| Created | Nov 15, 2016 |
| Updated | Oct 26, 2017 |
| Risk |
|
| CVE ID | CVE-2016-8582 |
| Exploit Prediction Score | 96.28% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | All |