PT-2017-13416 · Hewlett Packard · Hp Arcsight Esm+1

Publicado 2017-10-31 · Atualizado 2017-11-21 · CVE-2017-14358

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP ArcSight ESM versions prior to 6.9.1c Patch 4 HP ArcSight ESM versions prior to 6.11.0 Patch 1 HP ArcSight ESM Express versions prior to 6.9.1c Patch 4 HP ArcSight ESM Express versions prior to 6.11.0 Patch 1

Description A URL redirection to untrusted site issue exists, which could be exploited remotely to allow URL redirection to untrusted sites.

Recommendations For HP ArcSight ESM and HP ArcSight ESM Express versions prior to 6.9.1c Patch 4, update to 6.9.1c Patch 4 or later. For HP ArcSight ESM and HP ArcSight ESM Express versions prior to 6.11.0 Patch 1, update to 6.11.0 Patch 1 or later.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2017-14358

Produtos afetados

Hp Arcsight Esm

Arcsight Esm Express

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-14358 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14358 · Aviso do Fabricante
• https://softwaresupport.hpe.com/km/KM02996760 · Nota
• https://auscert.org.au/bulletins/54166 · Nota