PT-2015-7118 · Hewlett Packard · Hp Arcsight Connector Appliance+2

Publicado 2015-11-04 · Atualizado 2018-10-17 · CVE-2015-6030

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger version 6.0.0.7307.1 HP ArcSight Command Center version 6.8.0.1896.0 HP ArcSight Connector Appliance version 6.4.0.6881.3

Description The issue allows local users to potentially gain privileges by leveraging access to the arcsight account. This is because the software uses the root account to execute files owned by the arcsight user.

Recommendations For HP ArcSight Logger version 6.0.0.7307.1, consider restricting access to the arcsight account to minimize the risk of exploitation. For HP ArcSight Command Center version 6.8.0.1896.0, restrict the execution of files owned by the arcsight user to prevent potential privilege escalation. For HP ArcSight Connector Appliance version 6.4.0.6881.3, limit the use of the root account for executing files to reduce the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6030

Produtos afetados

Hp Arcsight Command Center

Hp Arcsight Connector Appliance

Hp Arcsight Logger

Referências · 5

• http://kb.cert.org/vuls/id/842252 · Nota
• http://securitytracker.com/id/1034073 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6030 · Nota de Segurança
• http://securitytracker.com/id/1034072 · Nota