PT-2017-13416 · Hewlett Packard · Hp Arcsight Esm+1

Published 2017-10-31 · Updated 2017-11-21 · CVE-2017-14358

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP ArcSight ESM versions prior to 6.9.1c Patch 4 HP ArcSight ESM versions prior to 6.11.0 Patch 1 HP ArcSight ESM Express versions prior to 6.9.1c Patch 4 HP ArcSight ESM Express versions prior to 6.11.0 Patch 1

Description A URL redirection to untrusted site issue exists, which could be exploited remotely to allow URL redirection to untrusted sites.

Recommendations For HP ArcSight ESM and HP ArcSight ESM Express versions prior to 6.9.1c Patch 4, update to 6.9.1c Patch 4 or later. For HP ArcSight ESM and HP ArcSight ESM Express versions prior to 6.11.0 Patch 1, update to 6.11.0 Patch 1 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2017-14358

Affected Products

Hp Arcsight Esm

Arcsight Esm Express

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-14358 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14358 · Vendor Advisory
• https://softwaresupport.hpe.com/km/KM02996760 · Note
• https://auscert.org.au/bulletins/54166 · Note