An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version before 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
hp arcsight enterprise security manager 6.8 |
||
hp arcsight enterprise security manager 6.5 |
||
hp arcsight enterprise security manager 6.0 |
||
hp arcsight enterprise security manager 6.11.0 |
||
hp arcsight enterprise security manager 6.0c |
||
hp arcsight enterprise security manager 6.5c |
||
hp arcsight enterprise security manager 6.8c |
||
hp arcsight enterprise security manager 6.9.0c |
||
hp arcsight enterprise security manager 6.9.1c |
||
hp arcsight enterprise security manager express 6.11.0 |
||
hp arcsight enterprise security manager express 6.8 |
||
hp arcsight enterprise security manager express 6.8c |
||
hp arcsight enterprise security manager express 6.5c |
||
hp arcsight enterprise security manager express 6.5 |
||
hp arcsight enterprise security manager express 6.0c |
||
hp arcsight enterprise security manager express 6.0 |
||
hp arcsight enterprise security manager express 6.9.1c |
||
hp arcsight enterprise security manager express 6.9.0 |
Vulmon