GCVE-110-CERTCC-2015-842252

Advisory PublishedCVSS 4.0/10

Vulnetix · Advisory published October 19, 2015

HP ArcSight Logger contains multiple vulnerabilities, allowing authentication bypass and privilege escalation in certain scenarios.

Download JSON Open in Console

Risk Scores

CVSS 2.0

4.0/10

Medium · AV:N/AC:L/Au:S/C:P/I:N/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score3.1remediation_levelOFreport_confidenceCenvironmental_score2.3469899607target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-2136 CVE-2015-6029 CVE-2015-6030

References

HP ArcSight Logger contains multiple vulnerabilities

url

HP ArcSight Logger contains multiple vulnerabilities

url

HP ArcSight Logger contains multiple vulnerabilities

url

HP ArcSight Logger contains multiple vulnerabilities

url

HP ArcSight Logger contains multiple vulnerabilities

url

HP ArcSight Logger contains multiple vulnerabilities

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON