CVE-2016-8582

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

57.43% chance of exploitation in the next 30 days, 99th percentile

Published

2016-10-28

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/alienvault_exec.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40684

References

• CVE Record
• NVD entry

Related

• CVE-2016-8581
• CVE-2016-8584
• CVE-2016-8580
• CVE-2016-8585
• CVE-2016-8527
• CVE-2016-8586