CVE-2011-2779

2011-07-1921:55:00

CWE-264

[email protected]

web.nvd.nist.gov

arcsight

connector appliance

cve-2011-2779

nvd

security vulnerability

log data

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.

Affected configurations

NVD

Node

hpwindows_event_log_smartconnectorRange≤6.0.0.60023.2

hparcsight_c1000_appliance

hparcsight_c1300_appliance

hparcsight_c3200_appliance

hparcsight_c3400_appliance

hparcsight_c5200_appliance

hparcsight_c5400_appliance

CPENameOperatorVersion
hp:windows_event_log_smartconnectorhp windows event log smartconnectorle6.0.0.60023.2
hp:arcsight_c1000_appliancehp arcsight c1000 applianceeq*
hp:arcsight_c1300_appliancehp arcsight c1300 applianceeq*
hp:arcsight_c3200_appliancehp arcsight c3200 applianceeq*
hp:arcsight_c3400_appliancehp arcsight c3400 applianceeq*
hp:arcsight_c5200_appliancehp arcsight c5200 applianceeq*
hp:arcsight_c5400_appliancehp arcsight c5400 applianceeq*

CPE	Name	Operator	Version
hp:windows_event_log_smartconnector	hp windows event log smartconnector	le	6.0.0.60023.2
hp:arcsight_c1000_appliance	hp arcsight c1000 appliance	eq	*
hp:arcsight_c1300_appliance	hp arcsight c1300 appliance	eq	*
hp:arcsight_c3200_appliance	hp arcsight c3200 appliance	eq	*
hp:arcsight_c3400_appliance	hp arcsight c3400 appliance	eq	*
hp:arcsight_c5200_appliance	hp arcsight c5200 appliance	eq	*
hp:arcsight_c5400_appliance	hp arcsight c5400 appliance	eq	*