CVE-2015-2902

HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate...

CVE-2015-2902

HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate...

CVE-2015-2903

The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of this password...

CVE-2015-6029

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2015-6030

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access...

CVE-2015-2903

The CVE-2015-2903 issue affects HP ArcSight SmartConnectors, specifically the CWSAPI SOAP service, prior to version 7.1.6. The root cause is a hardcoded password used by the CWSAPI SOAP service, which can allow a remote attacker to obtain administrative access if the password is known. Impact des...

CVE-2015-6030

HP ArcSight products (ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, ArcSight Connector Appliance 6.4.0.6881.3) are affected by CVE-2015-6030. The root account is used to execute files owned by the arcsight user, which may allow local users who have arcsight credentials to ga...

CVE-2015-6029

HP ArcSight Logger before 6.0 P2 is vulnerable to CVE-2015-6029: the SOAP interface does not limit authentication attempts, enabling remote brute-force access. The HP Security Bulletin (HPSBGN03429) confirms the impact and provides remediation: update to ArcSight Logger v6.0 P2 or later (6.0 P2, ...

CVE-2015-2902

HP ArcSight SmartConnectors before version 7.1.6 fail to verify X.509 certificates from Logger devices, enabling a man-in-the-middle attacker to spoof devices and read SSL-protected log traffic via a crafted certificate. This vulnerability affects ArcSight SmartConnectors prior to 7.1.6 and has a...

HP ArcSight SmartConnector Man-in-the-Middle Attack Vulnerability

HP ArcSight SmartConnector is a log collector product from Hewlett-Packard HP. A security vulnerability exists in HP ArcSight SmartConnector that stems from the program failing to properly validate SSL certificates. A remote attacker could use this vulnerability to conduct a man-in-the-middle...

HP ArcSight SmartConnector CWSAPI SOAP Service Using Hardcoded Passwords Vulnerability

HP ArcSight SmartConnector is a log collector product from Hewlett-Packard HP, USA. A security vulnerability exists in the HP ArcSight SmartConnector's CWSAPI SOAP service that stems from the program's use of hard-coded passwords. An attacker could exploit the vulnerability to obtain administrato...

PT-2015-7117

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger versions prior to 6.0 P2 Description The issue allows remote attackers to obtain access via a brute-force approach due to the lack of limitation on attempts to authenticate to the SOAP interface. Recommendations For HP...

PT-2015-5963

Name of the Vulnerable Software and Affected Versions HP ArcSight SmartConnectors versions prior to 7.1.6 Description The issue allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate, as HP ArcSight SmartConnectors do not verify X.509...

PT-2015-5964

Name of the Vulnerable Software and Affected Versions HP ArcSight SmartConnectors versions prior to 7.1.6 Description The issue concerns a hardcoded password in the CWSAPI SOAP service, which can be exploited by remote attackers to gain administrative access. Recommendations For versions prior to...

CVE-2015-2903: Undefined Security Weakness

The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of this password...

CVE-2015-2902: Undefined Security Weakness

HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate...

CVE-2015-6029: Undefined Security Weakness

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach...

PT-2015-7118

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger version 6.0.0.7307.1 HP ArcSight Command Center version 6.8.0.1896.0 HP ArcSight Connector Appliance version 6.4.0.6881.3 Description The issue allows local users to potentially gain privileges by leveraging access to the...

CVE-2015-6030: Undefined Security Weakness

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access...

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

Overview The HP ArcSight SmartConnector fails to properly validate SSL certificates, and also contains a hard-coded password. Description CWE-295: Improper Certificate Validation - CVE-2015-2902The ArcSight SmartConnector fails to validate the certificate of the upstream Logger device it is...