CVE-2011-2779

Currently unrated

Key Information:

Vendor
HP
Status
Arcsight C5400 Appliance
Arcsight C5200 Appliance
Arcsight C3200 Appliance
Arcsight C3400 Appliance
Vendor
CVE Published:
19 July 2011

Summary

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/68855
vdb-entryx_refsource_XF
http://www.kb.cert.org/vuls/id/122054
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.