CVE-2017-14956

AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script. Besides offering an export via a local download, the script also offers the possibility to send out any report via email to a given address (either in PDF or XLS format). Since there is no anti-CSRF token protecting this functionality, it is vulnerable to Cross-Site Request Forgery attacks.

• CWE-352

• http://packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/32Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/541342/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101284Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42988/Exploit, Third Party Advisory, VDB Entry
• https://www.rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/144617/AlienVault-USM-5.4.2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Oct/32Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/541342/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101284Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42988/Exploit, Third Party Advisory, VDB Entry
• https://www.rcesecurity.com/2017/10/cve-2017-14956-alienvault-usm-leaks-sensitive-compliance-information-via-csrf/Exploit, Third Party Advisory

Published

Oct 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14949Restlet Framework before 2.3.12 allows remote attackers to a…
• CVE-2017-1495IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could …
• CVE-2017-14952Double free in i18n/zonemeta.cpp in International Components…
• CVE-2017-14953HikVision Wi-Fi IP cameras, when used in a wired configurati…
• CVE-2017-14954The waitid implementation in kernel/exit.c in the Linux kern…
• CVE-2017-14955Check_MK before 1.2.8p26 mishandles certain errors within th…5.9
• CVE-2017-14957Stored XSS vulnerability via a comment in inc/conv.php in Bl…
• CVE-2017-14958lib.php in PivotX 2.3.11 does not properly block uploads of …
• CVE-2017-1496IBM Sterling B2B Integrator Standard Edition 5.2.x is vulner…
• CVE-2017-14960xDashboard in OpenText Document Sciences xPression (formerly…
• CVE-2017-14961In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains…
• CVE-2017-14962In IKARUS anti.virus before 2.16.18, the ntguard.sys driver …