CVE-2016-8580: Critical severity open source security information management vulnerability
Published Oct 28, 2016
·Updated
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.
Affected Software
2 affected components
AlienVault Open Source Security Information And Event Management<=5.3.1
AlienVault Unified Security Management<=5.3.1
Event History
Oct 28, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8580?
CVE-2016-8580 has a high severity rating due to the potential for arbitrary PHP code execution.
2
How do I fix CVE-2016-8580?
To fix CVE-2016-8580, upgrade to AlienVault OSSIM or USM version 5.3.2 or later.
3
Which versions are affected by CVE-2016-8580?
CVE-2016-8580 affects AlienVault OSSIM and USM versions up to and including 5.3.1.
4
What type of vulnerability is CVE-2016-8580?
CVE-2016-8580 is an object injection vulnerability that allows for arbitrary PHP code execution.
5
Where can I find more information about CVE-2016-8580?
More information about CVE-2016-8580 can often be found in security advisories or vulnerability databases.