CVEvulnerability

CVE-2015-2903

6.9 MEDIUM Published 2015-11-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of this password.

Affected configurations

• hp arcsight smartconnectors (<= 7.1.5)

References