CVE-2015-6030 HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow...
HighCVSS 7.2
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc arcsight connector appliance | <= 6.4.0.6881.3 | No fix listed |
| HP Inc arcsight logger | = 6.0.0.7307.1 | No fix listed |
| HP Inc arcsight command center | = 6.8.0.1896.0 | No fix listed |
| HP Inc arcsight connectors | <= 7.1.3 | No fix listed |
| HP Inc arcsight express | = 4.0 | No fix listed |
| HP Inc arcsight express | = 4.0-p1 | No fix listed |
| HP Inc arcsight management center | <= 2.0 | No fix listed |
| microfocus arcsight enterprise security manager | <= 6.5 | No fix listed |
References
- VU#842252 third-party-advisory us-government-resource
- 1034072 third-party-advisory vdb-entry
- 1034073 third-party-advisory vdb-entry
- h20566.www2.hpe.com third-party-advisory