| Package | Affected versions | Patched versions |
|---|---|---|
| arcsight command center | = 6.8.0.1896.0 | |
| arcsight connector appliance | ≤ 6.4.0.6881.3 | |
| arcsight connectors | ≤ 7.1.3 | |
| arcsight express | = 4.0 | |
| arcsight logger | = 6.0.0.7307.1 | |
| arcsight management center | ≤ 2.0 | |
| arcsight enterprise security manager | ≤ 6.5 |
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free