XML External Entity Parsing Vulnerability in ArcSight Logger by Micro Focus
CVE-2019-3481

7.1HIGH

Key Information:

Vendor
HP
Status
Arcsight Logger
Vendor
CVE Published:
25 March 2019

Summary

This vulnerability pertains to an XML External Entity (XXE) parsing issue found in ArcSight Logger. It affects versions before 6.7, potentially allowing attackers to exploit the system for unauthorized access or information disclosure by manipulating XML input. Users are encouraged to update their systems to the latest version to mitigate associated risks.

Affected Version(s)

ArcSight Logger Versions prior to 6.7

References

https://softwaresupport.softwaregrp.com/doc/KM03355866
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.