CVE-2009-2344: Sourcefire 3d Sensor

High severity, CVSS 9.0. EPSS: 9.3% chance of exploitation in the next 30 days.

The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.

Affected products

• Sourcefire 3d Sensor: up to and including 4.8.1; version 4.8 only; version 4.8.0.3 only; version 4.8.0.4 only
• Sourcefire Defense Center: up to and including 4.8.1; version 4.8 only; version 4.8.0.3 only; version 4.8.0.4 only

Published 2009-07-07. Last modified 2026-06-16.