Test ID:	1.3.6.1.4.1.25623.1.0.106389
Category:	Web application abuses
Title:	Observium Multiple Vulnerabilities
Summary:	Observium is prone to multiple vulnerabilities.
Description:	Summary: Observium is prone to multiple vulnerabilities. Vulnerability Insight: Observium is prone to multiple vulnerabilities: - Deserialization of untrusted data: The issue can be exploited to write mostly user-controlled data to an arbitrary file, such as a PHP session file. It is possible to exploit this issue to create a valid Observium admin session. - Admins can inject shell commands, possibly as root - Incorrect use of cryptography in event feed authentication - Authenticated SQL injection: This can be exploited to leak various configuration details including the password hashes of Observium users. Vulnerability Impact: An attacker may create a valid admin session or obtain sensitive information. Affected Software/OS: Observium before 0.16.10.8180 Solution: Update to 0.16.10.8180 or later CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.