Lucene search
HistoryNov 04, 2015 - 3:59 a.m.
CVE-2015-6030
cve-2015-6030
hp
arcsight logger
command center
connector appliance
privilege escalation
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.3%
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Affected configurations
Node
hparcsight_connector_applianceRange≤6.4.0.6881.3
Node
hparcsight_loggerMatch6.0.0.7307.1
Node
hparcsight_command_centerMatch6.8.0.1896.0
Node
hparcsight_connectorsRange≤7.1.3
ORhparcsight_expressMatch4.0
ORhparcsight_expressMatch4.0p1
ORhparcsight_management_centerRange≤2.0p1
ORmicrofocusarcsight_enterprise_security_managerRange≤6.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:arcsight_connector_appliance | hp arcsight connector appliance | le | 6.4.0.6881.3 |
Related
prion
prion
Command injection
2015-11-04 03:59:00
cvelist
cvelist
CVE-2015-6030
2015-11-04 02:00:00
nvd
nvd
CVE-2015-6030
2015-11-04 03:59:08
nessus
nessus
HP ArcSight Logger < 6.0 P2 Multiple Vulnerabilities
2015-09-17 00:00:00
cert
cert
HP ArcSight Logger contains multiple vulnerabilities
2015-10-19 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2015-6030