Approved changes feed: RSS · Atom

cpe:2.3:a:hp:arcsight_logger:6.0.0.7307.1:*:*:*:*:*:*:*

part: a version: 6.0.0.7307.1 update: *

VendorHp (4e2366e1-58ef-5a93-a9f3-b1274f17de1d)
ProductArcsight Logger (b141001c-c300-5c97-8eaf-07d440a2dafd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6030 vulnerable 2026-06-08 05:06:51.168562 Details available
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Published: 2015-11-04T02:00:00.000Z
Updated: 2024-08-06T07:06:35.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6029 vulnerable 2026-06-08 05:06:51.166558 Details available
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
Published: 2015-11-04T02:00:00.000Z
Updated: 2024-08-06T07:06:35.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.