CVE-2015-3446

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2015-05-01

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Unified Security Management (Alienvault)

References

• http://www.securityfocus.com/bid/74403
• http://www.zerodayinitiative.com/advisories/ZDI-15-161/
• https://www.alienvault.com/forums/discussion/4415/