CVE-2015-3446

Description

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).

References

https://www.alienvault.com/forums/discussion/4415/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3490

http://www.zerodayinitiative.com/advisories/ZDI-15-161/

http://www.securityfocus.com/bid/74403

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS