VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jun 18, 2014· Updated May 6, 2026

CVE-2014-4152

CVE-2014-4152

Description

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task request, related to injecting an ssh public key.

Affected products

7
  • Alienvault/Open Source Security Information Management7 versions
    cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:*range: <=4.7.0
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:alienvault:open_source_security_information_management:4.6.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.