HP ArcSight Logger prior to 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.
hp arcsight logger