PT-2019-12458 · Micro Focus · Micro Focus Arcsight Logger

Publicado 2019-10-04 · Atualizado 2019-10-10 · CVE-2019-11655

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus ArcSight Logger versions 6.7.0 and later

Description The issue concerns an unrestricted file upload vulnerability. This could allow the upload of files with dangerous types.

Recommendations For Micro Focus ArcSight Logger versions 6.7.0 and later, consider restricting file uploads to only allow safe file types until a patch is available.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-11655

Produtos afetados

Micro Focus Arcsight Logger

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11655 · Nota de Segurança
• https://community.microfocus.com/t5/ArcSight-Announcements/ArcSight-Logger-Fix-for-Security-Vulnerability/td-p/2699569 · Nota
• https://osv.dev/vulnerability/CVE-2019-11655 · Aviso do Fabricante