Critical severity9.8NVD Advisory· Published Mar 22, 2017· Updated Jun 17, 2026

CVE-2017-6972

Description

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alienvault/Ossim
cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*
Range: <=5.3.6
Alienvault/Unified Security Management
cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*
Range: <=5.3.6
Nfsen/Nfsen
cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*
Range: <=1.3.7

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/97016nvdThird Party AdvisoryVDB Entry
sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/nvdThird Party Advisory
www.alienvault.com/forums/discussion/8698nvdVendor Advisory
www.exploit-db.com/exploits/42314/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.012
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000