Lucene search
CertccCVE-2015-2903HistoryNov 04, 2015 - 3:59 a.m.
CVE-2015-2903
2015-11-0403:59:02
certcc
web.nvd.nist.gov
24
cve-2015-2903
hp arcsight
smartconnectors
nvd
cwsapi
soap service
hardcoded password
remote attackers
administrative access
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
79.5%
The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of this password.
Affected configurations
Node
hparcsight_smartconnectorsRange≤7.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | arcsight_smartconnectors | * | cpe:2.3:a:hp:arcsight_smartconnectors:*:*:*:*:*:*:*:* |
Related
prion
prion
Hardcoded credentials
2015-11-04 03:59:00
nvd
nvd
CVE-2015-2903
2015-11-04 03:59:02
cvelist
cvelist
CVE-2015-2903
2015-11-04 02:00:00
cert
cert
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
79.5%
Related for CVE-2015-2903