Design/Logic Flaw

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

CVE-2011-0770

CVE-2011-0770 affects HP ArcSight Connector Appliance's Windows Event Log SmartConnector prior to 6.1. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient sanitization in exported reports, allowing an attacker to inject script via the Windows XP variable in the exported...

HP ArcSight Connector Appliance XSS vulnerability

Overview ArcSight Connector Appliance v6.0.0.60023.2, and possibly previous versions, contains a module which is vulnerable to cross site scripting XSS. Description Windows Event Log SmartConnector, a component of ArcSight Connector Appliance v6.0.0.60023.2 does not sanitize all input fields. As ...