PT-2015-7118 · Hewlett Packard · Hp Arcsight Connector Appliance+2

Published 2015-11-04 · Updated 2018-10-17 · CVE-2015-6030

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger version 6.0.0.7307.1 HP ArcSight Command Center version 6.8.0.1896.0 HP ArcSight Connector Appliance version 6.4.0.6881.3

Description The issue allows local users to potentially gain privileges by leveraging access to the arcsight account. This is because the software uses the root account to execute files owned by the arcsight user.

Recommendations For HP ArcSight Logger version 6.0.0.7307.1, consider restricting access to the arcsight account to minimize the risk of exploitation. For HP ArcSight Command Center version 6.8.0.1896.0, restrict the execution of files owned by the arcsight user to prevent potential privilege escalation. For HP ArcSight Connector Appliance version 6.4.0.6881.3, limit the use of the root account for executing files to reduce the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-6030

Affected Products

Hp Arcsight Command Center

Hp Arcsight Connector Appliance

Hp Arcsight Logger

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-6030 · Security Note
• http://kb.cert.org/vuls/id/842252 · Note
• http://securitytracker.com/id/1034073 · Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416 · Note
• http://securitytracker.com/id/1034072 · Note