CVE-2015-6030

published 2015-11-04

CVE-2015-6030: HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files…

Priority P4 31 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
hp	arcsight_command_center	—	—
hp	arcsight_connector_appliance	<= 6.4.0.6881.3	—
hp	arcsight_connectors	<= 7.1.3	—
hp	arcsight_express	—	—
hp	arcsight_logger	—	—
hp	arcsight_management_center	<= 2.0	—
microfocus	arcsight_enterprise_security_manager	<= 6.5	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264