CVE-2009-3441: Medium severity alienvault open source security information management vulnerability
Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarmsevents.php or (2) host/drawtree.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3441?
CVE-2009-3441 has a moderate severity, as it allows unauthorized access to sensitive infrastructure information.
How do I fix CVE-2009-3441?
To fix CVE-2009-3441, upgrade OSSIM to version 2.1.2 or later to ensure authentication bypass issues are resolved.
What systems are affected by CVE-2009-3441?
CVE-2009-3441 affects OSSIM versions prior to 2.1.2, as well as versions 1.0.4 and 1.0.6.
What are the exploitation details for CVE-2009-3441?
CVE-2009-3441 can be exploited by making direct requests to specific PHP scripts that do not enforce authentication.
What could attackers do by exploiting CVE-2009-3441?
By exploiting CVE-2009-3441, attackers could read sensitive graphs and infrastructure-related information without proper authentication.