CVE-2015-2902

MEDIUM 6.8CVE-2015-2902 · Published 04/11/2015 · updated 17/06/2026

In short

CVE-2015-2902 is a MEDIUM (CVSS 6.8) vulnerability affecting arcsight smartconnectors (hp).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
arcsight smartconnectors hp	`≤ 7.1.5`	No fix yet

Description

HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate.

References

kb.cert.org/vuls/id/350508 · Third Party Advisory
securitytracker.com/id/1034078
h20564.www2.hpe.com/hpsc/doc/public/display · Vendor Advisory

More vulnerabilities in arcsight smartconnectors

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free