Authorization Policy Bypass in HP ArcSight Logger

CVE-2015-2136

Summary

The vulnerability in HP ArcSight Logger allows remote authenticated users to circumvent the authorization policies that are intended to restrict access. This issue arises from unspecified vectors within the system, leading to potential unauthorized actions by attackers. Organizations using vulnerable versions of HP ArcSight Logger should apply updates or implement compensating controls to mitigate exposure to this security flaw.

References