Unscored severity · published Nov 4, 2015
CVE-2015-6030
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight…
–
CVSS
0.6%
EPSS
No
On KEV
Description
HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Arcsight Command Center · HP
6.8.0.1896.0 · source: NVD
AC
Arcsight Connector Appliance · HP
through 6.4.0.6881.3 · source: NVD
AC
Arcsight Connectors · HP
through 7.1.3 · source: NVD
AE
Arcsight Enterprise Security Manager · Microfocus
through 6.5 · source: NVD
AE
Arcsight Express · HP
4.0; 4.0 · source: NVD
AL
Arcsight Logger · HP
6.0.0.7307.1 · source: NVD
AM
Arcsight Management Center · HP
through 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6030
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6030
Third Party Advisory
http://www.kb.cert.org/vuls/id/842252
Third Party Advisory
http://www.securitytracker.com/id/1034072
Third Party Advisory
http://www.securitytracker.com/id/1034073
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416