CVE-2014-5158

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.6.0

Description The issue allows remote attackers to execute arbitrary commands. This is possible through the av-centerd SOAP service and the backup command in the ossim-framework service.

Recommendations For versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the av-centerd SOAP service and the backup command in the ossim-framework service until a patch is applied.