Unrestricted File Upload Vulnerability in Micro Focus ArcSight Logger
CVE-2019-11655

8.8HIGH

Key Information:

Vendor
HP
Status
Arcsight Logger.
Vendor
CVE Published:
4 October 2019

Summary

The unrestricted file upload vulnerability in Micro Focus ArcSight Logger allows attackers to upload files with potentially dangerous types. This issue is present in version 6.7.0 and later, exposing systems to risks associated with malicious file execution and unauthorized access. Users are strongly advised to apply the necessary security patches and updates to mitigate this risk.

Affected Version(s)

ArcSight Logger. 6.7.0 and later.

References

https://community.microfocus.com/t5/ArcSight-Announcement...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.