CVEvulnerability
CVE-2015-6030
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Affected configurations
• hp arcsight connector appliance (<= 6.4.0.6881.3)
• hp arcsight logger 6.0.0.7307.1
• hp arcsight command center 6.8.0.1896.0
• hp arcsight connectors (<= 7.1.3)
• hp arcsight express 4.0
• hp arcsight management center (<= 2.0)
• microfocus arcsight enterprise security manager (<= 6.5)
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/842252 Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1034072 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034073 Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416 Third Party Advisory
- http://www.kb.cert.org/vuls/id/842252 Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1034072 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034073 Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416 Third Party Advisory