CVE-2016-8582: SQL Injection
Published Oct 28, 2016
·Updated
A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOADFILE.
Affected Software
2 affected components
AlienVault Open Source Security Information And Event Management<=5.3.1
AlienVault Unified Security Management<=5.3.1
Event History
Oct 28, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8582?
CVE-2016-8582 is considered a critical vulnerability due to its potential for arbitrary SQL query execution.
2
How do I fix CVE-2016-8582?
To fix CVE-2016-8582, upgrade to AlienVault OSSIM or USM version 5.3.2 or later.
3
What type of attack can CVE-2016-8582 facilitate?
CVE-2016-8582 allows attackers to execute arbitrary SQL queries, potentially exposing sensitive database information.
4
Which versions are affected by CVE-2016-8582?
CVE-2016-8582 affects AlienVault OSSIM and USM versions up to and including 5.3.1.
5
Is CVE-2016-8582 related to file access vulnerabilities?
Yes, CVE-2016-8582 allows an attacker to read local system files via MySQL's LOAD_FILE function.