« Volver al listado

CVE-2014-4152

Estado: ModificadaAlta (10)—

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Alienvault — Open Source Security Information Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4152",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-18T19:55:06.683",
  "references": [
    {
      "url": "http://forums.alienvault.com/discussion/2806",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/59112",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-206/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.alienvault.com/discussion/2806",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/59112",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-14-206/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key."
    },
    {
      "lang": "es",
      "value": "El servicio av-centerd SOAP en AlienVault OSSIM anterior a 4.8.0 permite a atacantes remotos ejecutar código arbitrario a través de una solicitud remote_task manipulada, relacionado con inyectar una clave pública de ssh."
    }
  ],
  "lastModified": "2026-06-17T00:09:30.630",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B04249B5-CCF5-40D7-ADBE-54958839EB83",
              "versionEndIncluding": "4.7.0"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F699448-40D9-46AD-978E-19CFC27B5D3E"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "826BA62F-D64D-4740-B39F-B5AD8B14C48C"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DDAA1EB-D69E-4DDE-8931-92667C297AB7"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46D7C427-DF18-48CA-B337-8AFD35FBF68A"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57C05724-5D21-4D4D-B8A5-8B731250B5E3"
            },
            {
              "criteria": "cpe:2.3:a:alienvault:open_source_security_information_management:4.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59510261-E3C1-42A7-B160-AD817429AC11"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}